Sectors
Law firms and notaries
Application, document-database and AI-system development for law firms and notaries. Integration of matters, documents, legal references and digital exchanges, with access permissions, versions and traceability.
Matters, evidence and procedural exchanges
A legal matter connects parties, documents, their versions and procedural exchanges. Document search must identify the passage used and the document containing it. For notarial instruments, formats, signatures and preservation arrangements are defined according to the instrument and applicable framework.
Examples of data processed in this sector
Matters and parties
Matters, parties, participants and access permissions define the scope of consultation and collaboration.
Documents and references
Contracts, correspondence, attachments and case law retain their versions, dates, references and links to matters.
Filings and instruments
Filed documents, receipts, signatures and metadata document the relevant transmissions and instruments.
Documented practices and systems in Switzerland
Public sources describing organisational practices and software interfaces. PERINGER project references appear separately below.
Engineering services
Matter and document databases
Structuring of matters, parties, documents and versions in databases and search catalogues. OCR, metadata extraction and links between documents, attachments and matter references.
Data platforms and warehouses →Legal and document search
Search across authorised documents, with filters by matter, date and document type. Results open the retrieved passage and its source version, including in multilingual collections.
Document search and knowledge bases →AI extraction and comparison
Tools for version comparison, clause or data extraction and source-referenced summaries. Legal-review steps and permitted agent actions are defined in the workflow.
Intelligent document processing →Portals and document exchanges
Submission and viewing interfaces, connectors to business software and file preparation for the selected exchange channels. Metadata, receipts and references support transmission tracking.
Web portals and platforms →Hosting and private AI services
Deployment of databases, search indexes and models in dedicated or cloud environments. Identity, technical-access, logging and backup configuration follows the document scope entrusted to the system.
AI infrastructure and model deployment →
Data protection and system security
The data-protection framework depends on the organisation’s status and processing activities. For processing subject to the revised Swiss Federal Act on Data Protection (FADP), security measures and protective defaults are defined from the design stage according to risk.
Processing takes account of the FADP and applicable professional-secrecy duties. Provider access, AI-service terms and document reuse are assessed before integration. Notarial formalities and judicial communication arrangements depend on the relevant framework and procedure. Official source
Technical measures to define for the processing involved
- Matter- and document-level permissions checked before retrieval and answer generation
- Encryption, multifactor authentication and restricted, logged administrator access
- References to original documents, version preservation and backups with restore tests
Technical guidance · FDPIC · NCSC
Legal framework, providers and incidents
Purposes, retention and rights
The design specifies the data collected, its uses, recipients and retention periods. It provides for information to individuals and handling of access or rectification requests. Record-keeping and documentation duties are assessed against the processing involved and applicable exemptions.
Hosting and processors
An organisation remains responsible when it entrusts data to a provider. The assessment covers contracts, subprocessors, processing locations and access from abroad. Hosting outside Switzerland is possible subject to the applicable transfer safeguards.
Risk assessment and incidents
A data protection impact assessment (DPIA) is required when planned processing is likely to pose a high risk to individuals. The controller reports a data security breach to the FDPIC as soon as possible when it is likely to create a high risk to their personality or fundamental rights.
Related projects
Banking and finance
AI extraction of financial data
Extract information from financial announcements and integrate it into a data platform as structured data.
Software and IT systems
Automation of enterprise-service administration
Develop administration automation tools for an Azure, Microsoft 365 and SharePoint environment used across multiple sites.
To go deeper
Discuss your project
A discussion of your project’s design, development and production deployment.