Security

Security at Firnkern

Where your data lives, how Firnkern protects it – and what is still outstanding. We only describe what is built and tested.

• Where the data lives
• What never goes to Firnkern
• Licence check without a connection
• Sign-in and rights
• Encryption on the company network
• Backup
• AI
• Sub-processors
• How we test
• Security updates
• To be honest

Where the data lives

On your company network (default): Firnkern Server runs on a computer of your company. Database, recordings and documents are stored in the data folder on that computer. Employees open an address in the browser.

In the cloud (in preparation, not currently available): A dedicated instance of the software per organisation is planned – in a data centre in Switzerland or, by arrangement, in the EU, with HTTPS encryption, two-factor sign-in and daily backup. Each customer gets a separate instance (own container, own database). Cloud operation is built; a hosted customer operation is not yet running.

What never goes to Firnkern

• When the software runs on your company network, Firnkern processes no personal data of your organisation. The software sends nothing to Firnkern unless your admin acts.
• Reports, error reports and the update check are options your admin turns on. Before each report, the person reporting sees what will be sent.
• Dossier content is never sent.
• Support works without access to content. Remote access only in individual cases, at your request and under your supervision.

Basis: Terms sections 10.1, 10.3 and F4.

Licence check without a connection

The licence key is checked on your computer – the software needs no connection to Firnkern for this. At the role limit no further role can be created; existing roles remain fully usable. When the licence ends, read mode applies: everything remains readable and exportable. Firnkern never blocks or deletes data on your company network (Terms B3, 5.5).

Sign-in and rights

• Every person has their own login. New people join via an invitation link.
• What someone sees and may do depends on their right: Employees, Head of department, Senior management or Administration.
• Passwords: at least 12 characters (default; your admin can adjust the rule), check against weak passwords, lock after 5 failed attempts for 10 minutes (default).
• The server stores passwords and sessions only as hashes (passwords with PBKDF2-SHA256).
• Two-factor sign-in with an authenticator app: on the company network it can be set for nobody, for management and admin, or for everyone; in cloud operation it is mandatory for management and admin. The secrets are stored encrypted in the database.
• The list «All access» shows who has set up two-factor sign-in and until when a time-limited access is valid.

Encryption (HTTPS) on the company network

During setup, Firnkern creates its own certificate. The connection is then encrypted, but the browser shows a warning page once because it does not know the issuer. The certificate authority is valid only for the names of this server; its private key is discarded after signing.

For operation we recommend your company's own certificate or installing the Firnkern certificate on the workstations. The guide for your IT describes both ways – For your IT. The server also sets security headers, including a Content Security Policy.

Backup

• The server backs up automatically every day (database, recordings, documents, AI settings and certificate) and refreshes the daily backup every six hours.
• Your admin can choose «Back up now» at any time and restore a backup. Before an update, the server creates a backup itself.
• The backup also contains the key for the two-factor secrets. Keep backups as protected as the database.
• The built-in backup does not replace a backup outside the computer. That remains your organisation's task (Terms 6.2).

AI

Firnkern works without AI or at three levels: level 1 on your own network without the internet, level 2 with the Mistral model, operated by Infomaniak in Geneva, level 3 with Anthropic in the USA – only with explicit consent. Your admin decides which level applies. The «AI and data protection» page in the software shows word for word what last went to a provider. More: AI at Firnkern.

Sub-processors

On your company network with your own AI account, Firnkern processes no personal data of your organisation; you conclude the contract with the AI provider directly. Only in cloud operation and with «AI via Firnkern» does Firnkern process personal data on your behalf. The data processing agreement applies; the sub-processors are listed in its Annex 2 (Terms, Annex 1 and 2).

How we test

• Firnkern Server undergoes an internal security test and is tested against the known attack paths. We fix vulnerabilities we find before delivery. There has been no external audit so far.
• A software bill of materials (SBOM, CycloneDX format) exists. You can obtain it on request from security@firnkern.com.
• Which third-party components Firnkern contains and under which licence is listed in the program folder (file Drittlizenzen.txt and folder Lizenztexte).

Security updates

Firnkern provides security updates for each major version free of charge for at least five years from its market launch – also after the licence term has ended, in read mode. Firnkern states the end date (month and year) on the download and pricing pages; it is not fixed yet because the sales launch is still to come. Your admin installs updates (Terms B4, F4).

As of 3 November 2026 · Security questions: security@firnkern.com · general: info@firnkern.ch