Swiss nFADP

Bot protection under the Swiss nFADP

Switzerland's revised data protection law sets GDPR-level expectations. CaptchaFox meets them with cookie-free verification, minimal data and EU hosting recognized as adequate.

No cookies or tracking
EU hosting recognized as adequate
Processor guarantees

Adequate destination

Switzerland recognizes EU and EEA countries as providing adequate data protection – so data may flow to our EU data centers without extra safeguards.

No cookies, no tracking

The widget stores nothing on the visitor's device and never builds profiles – verification stays invisible and consent-free.

Processor guarantees

CaptchaFox processes data only on your instructions, with the contractual guarantees the nFADP requires from processors.

nFADP compliance checklist

How CaptchaFox aligns with the revised Federal Act on Data Protection (revFADP/nDSG), in force since September 2023.

Processing by contract and instruction
Art. 9 nFADP
CaptchaFox acts as your processor under a Data Processing Agreement and processes visitor data only as instructed.
Cross-border disclosure to adequate countries
Art. 16 nFADP
All data is processed in EU data centers. The Swiss Federal Council lists EU/EEA states as countries with adequate protection, so no additional transfer safeguards are required.
No tracking technologies
Art. 6 nFADP
No cookies, no persistent identifiers, no fingerprint profiles – the widget only evaluates signals the browser already sends.
Proportionate data processing
Art. 6(2) nFADP
Only the minimum data needed for bot detection is processed, and identifying data is anonymized as early as possible.
Transparency obligations supported
Art. 19 nFADP
We document exactly what the widget processes, so you can meet your information duties towards visitors with a single privacy-policy section.

Frequently asked questions

Everything you need to know. Can't find your answer? Contact our support team.

Is CaptchaFox compliant with the Swiss nFADP?

Yes. CaptchaFox processes only minimal visitor data on your instructions, anonymizes identifying data right away, uses no tracking technologies and hosts exclusively in EU data centers that Switzerland recognizes as adequate.

Can Swiss companies send data to CaptchaFox's EU servers?

Yes. The Swiss Federal Council's country list designates EU and EEA member states as providing adequate data protection, so disclosure to our EU data centers requires no additional safeguards.

Does the widget require consent from Swiss visitors?

Typically no. The widget stores nothing on the visitor's device and does not track users, so bot protection can rest on your overriding interest in securing your website.

Is a DPA available for Swiss customers?

Yes, on every plan. The agreement covers processor obligations, our subprocessor list and technical and organizational measures. Contact hello@captchafox.com to receive it.