Sectors
Associations & NGOs
Data engineering, web and mobile applications and AI systems for associations and NGOs. Development of platforms connecting programme activities, funding, supporter relationships and document resources, from collection to analysis and publication.
Programmes, partners and funding
Programme reporting can bring together field forms, monitoring indicators, expenditure and funding. The data model connects this information by project, location and period. The design provides separate access permissions for participant records, supporter relationships and aggregated results intended for publication.
Examples of data processed in this sector
Activities and results
Surveys, completed activities and indicators support project monitoring and evaluation.
Funding and expenditure
Budgets, earmarked contributions and accounting entries connect funding with projects and reporting periods.
Members and supporters
Memberships, donations, recurring payments and communication preferences support member and donor relationships.
Documented practices and systems in Switzerland
Public sources describing organisational practices and software interfaces. PERINGER project references appear separately below.
Engineering services
Programme data platforms
Pipelines and data warehouses bringing together surveys, activities, indicators and financial data. Modelling of projects, locations, periods and currencies for comparable analysis that retains each indicator’s definition and sources.
Data platforms and warehouses →Data collection applications and portals
Development of multilingual forms, mobile applications and partner portals. Input validation, attachments and data synchronisation after offline use, with tracking of corrections and approvals.
Custom software and applications →CRM, donations and payments
Integration of donation and membership platforms with CRM and accounting. Reconciliation of contacts, transactions, payouts and allocations, including recurring donations, refunds and communication preferences.
APIs and systems integration →AI and document knowledge
Search systems and multilingual assistants for reports, evaluations and programme documents. Extraction into structured data, with source references and access limited to authorised documents.
Document search and knowledge bases →Data exchange, publication and hosting
APIs and portals for partner exchanges, dashboards and publication of aggregated results. Application and database deployment with separate access permissions, logging, backups and monitoring.
Web portals and platforms →
Data protection and system security
The data-protection framework depends on the organisation’s status and processing activities. For processing subject to the revised Swiss Federal Act on Data Protection (FADP), security measures and protective defaults are defined from the design stage according to risk.
Private-law associations are subject to the FADP when processing personal data. Some programmes may involve health, social-assistance or religious or political belief information, which falls within sensitive data. Participant, member and donor records are distinguished, with rules for partner exchanges and publication of results. Official source
Technical measures to define for the processing involved
- Access by programme and partner, with permissions revoked when assignments end
- Encryption of mobile data and transfers, multifactor authentication and access management for collection platforms
- Export and re-identification risk checks, access logs and tested restoration of programme databases
Technical guidance · FDPIC · NCSC
Legal framework, providers and incidents
Purposes, retention and rights
The design specifies the data collected, its uses, recipients and retention periods. It provides for information to individuals and handling of access or rectification requests. Record-keeping and documentation duties are assessed against the processing involved and applicable exemptions.
Hosting and processors
An organisation remains responsible when it entrusts data to a provider. The assessment covers contracts, subprocessors, processing locations and access from abroad. Hosting outside Switzerland is possible subject to the applicable transfer safeguards.
Risk assessment and incidents
A data protection impact assessment (DPIA) is required when planned processing is likely to pose a high risk to individuals. The controller reports a data security breach to the FDPIC as soon as possible when it is likely to create a high risk to their personality or fundamental rights.
Related projects
Culture, media and associations
From CRM to analytical data
Connect CRM data with analytical tools and develop dashboards for a media foundation.
Culture, media and associations
Data automation for a cultural event
Automate data preparation for a cultural event and manage its web content.
To go deeper
Discuss your project
A discussion of your project’s design, development and production deployment.