{"id":12192,"date":"2025-08-28T15:04:11","date_gmt":"2025-08-28T13:04:11","guid":{"rendered":"https:\/\/kaizuno.com\/conditions-dutilisation\/"},"modified":"2026-03-25T09:30:07","modified_gmt":"2026-03-25T08:30:07","slug":"terms-of-use","status":"publish","type":"page","link":"https:\/\/kaizuno.com\/fr\/terms-of-use\/","title":{"rendered":"Terms of use"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Our terms of use<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

*\u00a0 This is a courtesy translation of the original German document. In the event of any discrepancy between this English translation and the German original, the German version shall prevail.<\/em><\/p>

Effective: 1 March 2026<\/strong><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\n

1. What this is about<\/h2>\n
\n

1.1 Scope<\/h3>\n

These Terms of Use govern the use of the KAIZUNO\u00ae Platform (hereinafter “Platform”) and apply from the moment you register or use the Platform.<\/p>\n\n<\/div>\n

\n

1.2 Guiding principle<\/h3>\n

These Terms of Use shall be interpreted in accordance with the principle of good faith (Swiss Civil Code, Art. 2). Both parties commit to treating each other fairly, honestly and respectfully.<\/p>\n\n<\/div>\n

\n

1.3 Acceptance<\/h3>\n

By registering for or using the Platform, you accept these Terms of Use. If you do not agree, please do not use the Platform.<\/p>\n\n<\/div>\n

\n

1.4 Applicable version<\/h3>\n

The current version of these Terms of Use, as published on the Platform, shall apply at all times.<\/p>\n\n<\/div>\n<\/div>\n

\n

2. Who we are<\/h2>\n

The KAIZUNO\u00ae Platform is operated by:<\/p>\n

Anrok GmbH<\/strong>\nVia Larisch 2\n7031 Laax, Switzerland\nUID: CHE-290.490.033\nEmail: data(at)kaizuno.com<\/p>\n

Where these Terms of Use refer to “we” or “provider”, this means Anrok GmbH.<\/p>\n

Contact persons:<\/strong>\nSecurity, incident management and data protection: Robert Knop, data(at)kaizuno.com<\/p>\n\n<\/div>\n

\n

3. What we offer you<\/h2>\n
\n

3.1 The Platform<\/h3>\n

The KAIZUNO\u00ae Platform is an AI-powered digital solution available at kaizuno.com and its associated subdomains that supports organisations with assessments, analyses and their development.<\/p>\n

The Platform is designed for organisations and their employees. Its scope of features may include assessments, reports, inspirations, recommendations and other AI-powered functions \u2014 including the processing of external information sources.<\/p>\n

It is based on a proprietary methodology integrated into the Platform. The specific scope of features may change and expand as the Platform evolves.<\/p>\n

The Platform is provided as a web-based SaaS solution and operated on Amazon Web Services (AWS) in Switzerland (data storage) and the EU (AI processing).<\/p>\n

User groups include organisation administrators, team leads and participants. The Platform does not support critical or important business functions within the meaning of regulatory outsourcing requirements.<\/p>\n\n<\/div>\n

\n

3.2 Our commitment<\/h3>\n

We continuously work to improve and develop the Platform further.<\/p>\n\n<\/div>\n

\n

3.3 Use of artificial intelligence<\/h3>\n

The Platform uses artificial intelligence as a core component. AI processing is performed via Anthropic Claude, provided through Amazon Web Services Bedrock in the EU region.<\/p>\n

No user data is transmitted to the AI model provider or used for training AI models.<\/p>\n

By using the Platform, you acknowledge that content is generated with AI support. For more details, please refer to Section 9 and Annex C.<\/p>\n\n<\/div>\n

\n

3.4 Support<\/h3>\n

We provide support by email at data(at)kaizuno.com. We aim to respond to your enquiries promptly.<\/p>\n\n<\/div>\n<\/div>\n

\n

4. Prices and taxes<\/h2>\n

All prices are quoted exclusive of any applicable taxes, duties or levies. Invoices are payable within the period stated on the invoice. You are responsible for complying with the tax regulations applicable in your country. For invoices issued to companies within the EU, the reverse charge mechanism applies.<\/p>\n\n<\/div>\n

\n

5. Your user account<\/h2>\n
\n

5.1 Registration<\/h3>\n

We provide you with a personal user account. When registering, you provide truthful, complete and up-to-date information.<\/p>\n\n<\/div>\n

\n

5.2 Login credentials<\/h3>\n

The security of your login credentials is your responsibility. You are responsible for all activity under your account. Please do not share your login credentials with third parties.<\/p>\n\n<\/div>\n

\n

5.3 User roles<\/h3>\n

The Platform offers various roles with different permissions \u2014 for example, for managing the organisation account, supervising teams or participating in assessments. The available roles and their permissions may change or be expanded as the Platform evolves.<\/p>\n

Whoever manages access within your organisation also decides who is granted access \u2014 including external individuals such as consultants, coaches or partners. Responsibility for granting access lies with your organisation.<\/p>\n\n<\/div>\n

\n

5.4 What data belongs on the Platform<\/h3>\n

The entry of confidential business information, trade secrets or particularly sensitive personal data is not intended. Should you enter such data nonetheless, you do so at your own risk. We assume no special security guarantee and no liability in this regard.<\/p>\n\n<\/div>\n

\n

5.5 Suspension or deletion<\/h3>\n

In the event of violations of these Terms of Use or applicable law, we reserve the right to suspend or delete user accounts.<\/p>\n\n<\/div>\n<\/div>\n

\n

6. Your results and content<\/h2>\n
\n

6.1 Your reports belong to you<\/h3>\n

The reports and analyses generated by the Platform belong to you. You may use them freely \u2014 in particular:<\/p>\n\n

    \n \t
  • Share them within your organisation and use them for decision-making<\/li>\n \t
  • Pass them on to partners, headquarters, parent organisations or networks<\/li>\n \t
  • Share them with external consultants, coaches, auditors or other professionals<\/li>\n \t
  • Use them for presentations, reports or strategic documents<\/li>\n<\/ul>\n

    The results are there for you \u2014 use them in whatever way makes sense for your organisation. This right continues to apply after the termination of your use.<\/p>\n\n<\/div>\n

    \n

    6.2 Your input data belongs to you<\/h3>\n

    Everything you enter into the Platform remains your property. We do not claim any rights to it.<\/p>\n\n<\/div>\n

    \n

    6.3 What we may do with your data<\/h3>\n

    In order to provide the Platform’s services to you, we process, store and analyse your content \u2014 in particular for the creation of assessment reports.<\/p>\n

    Additionally, we use aggregated data that does not allow conclusions about individual users or organisations to improve our own products and services \u2014 for example, to refine the assessment logic or the quality of AI results. We do not sell your personal data to third parties.<\/p>\n\n<\/div>\n

    \n

    6.4 Deletion<\/h3>\n

    This processing permission ends when you delete your account or your data. Your content will then be deleted in accordance with our Privacy Policy, subject to the grace period described in Section 13.1.<\/p>\n\n<\/div>\n

    \n

    6.5 Your responsibility<\/h3>\n

    You warrant that the content you enter is lawful and does not infringe the rights of third parties.<\/p>\n\n<\/div>\n<\/div>\n

    \n

    7. Intellectual property<\/h2>\n

    With KAIZUNO\u00ae we provide you with a comprehensive platform. Below we describe what this includes \u2014 and why we protect it.<\/p>\n\n

    \n

    7.1 The KAIZUNO\u00ae trademark<\/h3>\n

    KAIZUNO\u00ae is a registered European trademark (word and figurative mark). You may of course use the name and logo in connection with the Platform \u2014 for example, to refer to it or describe it.<\/p>\n

    What we cannot permit is the use of the trademark or logo in your own products, materials or profiles without our consent, as well as the registration of marks that may be confused with KAIZUNO\u00ae.<\/p>\n\n<\/div>\n

    \n

    7.2 The methodology<\/h3>\n

    The KAIZUNO\u00ae Platform is based on a proprietary methodology. It is protected by copyright.<\/p>\n

    Within the Platform, the methodology is available to you without restriction \u2014 you benefit from it with every assessment. What we protect is the methodology itself: it may not be used, reproduced or used as a basis for your own methods, training programmes or consulting services outside the Platform.<\/p>\n\n<\/div>\n

    \n

    7.3 Software and technology<\/h3>\n

    Behind the Platform are software, AI models, assessment logic, analytical processes and a designed user interface. All of this is protected by copyright.<\/p>\n

    You use this technology with every click \u2014 but the technical building blocks themselves may not be examined, decompiled, extracted or used to build competing systems.<\/p>\n\n<\/div>\n

    \n

    7.4 Published works<\/h3>\n

    The methodology is also available in a book and an audiobook. These works are freely available for personal use \u2014 however, they may not be commercially reused or used as a basis for your own offerings.<\/p>\n\n<\/div>\n

    \n

    7.5 Your usage licence<\/h3>\n

    All content on the Platform \u2014 texts, graphics, logos, images and data \u2014 is protected, unless created by you.<\/p>\n

    Excluded are the reports and analyses that belong to you pursuant to Section 6. Upon registration, you receive a usage licence for the intended use of the Platform. This licence is valid for the duration of your use, is non-transferable and is tied to your user account.<\/p>\n\n<\/div>\n<\/div>\n

    \n

    8. Fair use<\/h2>\n

    We want you to get the most out of the Platform. To ensure this works for everyone, we ask for respectful and responsible use.<\/p>\n

    What we cannot permit:<\/p>\n\n

      \n \t
    • Using insights from the Platform to develop comparable products, methods or services<\/li>\n \t
    • Circumventing technical security measures, decompiling the software or performing automated access<\/li>\n \t
    • Conducting security tests (penetration testing) without our prior written consent<\/li>\n \t
    • Uploading offensive, discriminatory or unlawful content<\/li>\n \t
    • Uploading harmful content or compromising the security of the Platform \u2014 this includes phishing, social engineering, introducing malware or attempting to gain unauthorised access<\/li>\n \t
    • Using the Platform for unlawful purposes<\/li>\n<\/ul>\n

      In the event of violations, we reserve the right to restrict or terminate access. In cases of serious or malicious violations \u2014 in particular criminal offences, data misuse or intentional damage \u2014 we additionally reserve the right to take legal action and to preserve the relevant data as evidence.<\/p>\n\n<\/div>\n

      \n

      9. AI inspires \u2014 it does not decide<\/h2>\n

      The Platform provides a complementary perspective for self-reflection and development. The results \u2014 including all AI-powered analyses, reports and recommendations \u2014 are impulses and thought-provoking inputs.<\/p>\n

      They may contain inaccuracies, errors or biases. They do not replace professional expert advice, regulatory inspections, certifications or audits, or your own duty of care.<\/p>\n

      The interpretation of results, the derivation of actions and their implementation are exclusively your and your organisation’s responsibility \u2014 implementation always takes place outside the Platform.<\/p>\n

      We are not liable for decisions or actions taken on the basis of Platform results \u2014 including where third parties such as consultants, coaches or other professionals use the results as a basis for their own recommendations.<\/p>\n\n<\/div>\n

      \n

      10. Limitations of our service and liability<\/h2>\n
      \n

      10.1 What we cannot guarantee<\/h3>\n

      Despite our best efforts, we cannot provide guarantees \u2014 neither for the uninterrupted availability of the Platform, the complete accuracy of AI-generated content, nor for the suitability of the results for any particular purpose (see also Section 9).<\/p>\n

      The Platform is a tool for self-reflection and development \u2014 not a substitute for professional expert advice or regulatory inspections. Decisions and actions you take on the basis of Platform results are your responsibility.<\/p>\n\n<\/div>\n

      \n

      10.2 Limitation of liability<\/h3>\n

      Our liability is limited to the usage fees paid by you in the preceding 12 months, but in any case no more than CHF 10’000. This limitation does not apply in cases of intent or gross negligence (Swiss Code of Obligations, Art. 100). Individual agreements remain reserved.<\/p>\n\n<\/div>\n

      \n

      10.3 Indemnification<\/h3>\n

      Should third-party claims arise against us as a result of your breach of these Terms of Use, you shall indemnify us \u2014 including reasonable legal and procedural costs.<\/p>\n\n<\/div>\n

      \n

      10.4 External content<\/h3>\n

      We occasionally link to third-party websites or services. We assume no responsibility for their content.<\/p>\n\n<\/div>\n<\/div>\n

      \n

      11. Availability and maintenance<\/h2>\n
      \n

      11.1 Our goal<\/h3>\n

      We want the Platform to be available at all times. However, we cannot guarantee uninterrupted service.<\/p>\n\n<\/div>\n

      \n

      11.2 Maintenance and development<\/h3>\n

      We continuously develop and regularly maintain the Platform. Should we permanently discontinue the Platform, we will notify paying customers at least 90 days in advance and refund the unused portion on a pro-rata basis.<\/p>\n\n<\/div>\n<\/div>\n

      \n

      12. Force majeure<\/h2>\n

      Some events are beyond our control \u2014 such as natural disasters, pandemics, power outages, failures of infrastructure providers, governmental orders or cyberattacks. We cannot be held liable for service disruptions attributable to such events.<\/p>\n\n<\/div>\n

      \n

      13. Termination<\/h2>\n
      \n

      13.1 By you<\/h3>\n

      You may terminate your account at any time. Before deletion, you may request an export of your data in a machine-readable format (JSON or CSV). We will provide the export within a reasonable timeframe.<\/p>\n

      After account deletion, we retain your data for a reasonable grace period \u2014 to protect against accidental deletion and to allow you to reactivate at a later time. After that, your data will be permanently deleted in accordance with our Privacy Policy.<\/p>\n\n<\/div>\n

      \n

      13.2 By us<\/h3>\n

      In the case of remediable breaches of these Terms of Use, we will first grant you a reasonable period to remedy the situation. In the case of serious or repeated violations, outstanding payments or abusive use, we may terminate access without prior notice.<\/p>\n\n<\/div>\n

      \n

      13.3 Your reports after termination<\/h3>\n

      Reports and analyses created during your use may continue to be used by you (see Section 6.1).<\/p>\n\n<\/div>\n

      \n

      13.4 What continues to apply<\/h3>\n

      Even after termination, the following continue to apply: the protection of intellectual property (Section 7), fair use (Section 8), liability provisions (Section 10) and applicable law (Section 16).<\/p>\n\n<\/div>\n<\/div>\n

      \n

      14. Transfer and corporate changes<\/h2>\n

      Should Anrok GmbH be sold, acquired or merged with another company, the rights and obligations under these Terms of Use may transfer to the successor.<\/p>\n

      We will inform you in good time in such a case. Your rights under these Terms of Use will remain unchanged. If you do not agree with the transfer, you may terminate your account.<\/p>\n\n<\/div>\n

      \n

      15. Data protection<\/h2>\n

      The protection of your data is important to us. The processing of your personal data is governed by our Privacy Policy, available at kaizuno.com.<\/p>\n

      For organisations that have personal data processed through the Platform, the Data Processing Agreement (DPA) in Annex A additionally applies.<\/p>\n

      Annexes B (Information Security), C (AI Transparency) and D (Service Level) apply supplementarily. All Annexes become effective upon acceptance of these Terms of Use.<\/p>\n\n<\/div>\n

      \n

      16. Applicable law and jurisdiction<\/h2>\n
      \n

      16.1 Applicable law<\/h3>\n

      Swiss law applies exclusively. The application of the UN Convention on Contracts for the International Sale of Goods (CISG) is excluded.<\/p>\n\n<\/div>\n

      \n

      16.2 Jurisdiction<\/h3>\n

      The exclusive place of jurisdiction is Chur, Switzerland.<\/p>\n\n<\/div>\n

      \n

      16.3 Amicable resolution<\/h3>\n

      Before initiating court proceedings, both parties shall endeavour to reach an amicable resolution.<\/p>\n\n<\/div>\n<\/div>\n

      \n

      17. Changes to these Terms of Use<\/h2>\n

      We reserve the right to amend these Terms of Use. Material changes will be announced at least 30 days before they take effect \u2014 on the Platform or by email.<\/p>\n

      By continuing to use the Platform after the changes take effect, you agree to the new terms. In the event of material deterioration of your rights, you have an extraordinary right of termination. If you do not agree, you may terminate your account.<\/p>\n\n<\/div>\n

      \n

      18. Final provisions<\/h2>\n

      Should any provision of these Terms of Use be invalid, the validity of the remaining provisions shall not be affected. The invalid provision shall be replaced by a provision that comes as close as possible to the originally intended purpose.<\/p>\n\n<\/div>\n

      \n

      19. Contact<\/h2>\n

      If you have questions about these Terms of Use, you can reach us at:<\/p>\n

      Anrok GmbH<\/strong>\nVia Larisch 2\n7031 Laax, Switzerland\nEmail: data(at)kaizuno.com<\/p>\n\n<\/div>\n

      \n

      Annex A: Data Processing Agreement (DPA)<\/h2>\n

      This Annex is an integral part of the Terms of Use and becomes effective upon their acceptance.<\/strong><\/p>\n\n<\/div>\n

      \n

      A1. What this is about<\/h2>\n
      \n

      A1.1 Subject matter<\/h3>\n

      This Data Processing Agreement within the meaning of Art. 28 GDPR and Art. 9 nDSG governs the processing of personal data by Anrok GmbH (Processor) on behalf of the organisation (Controller) in the context of using the KAIZUNO\u00ae Platform.<\/p>\n\n<\/div>\n

      \n

      A1.2 Who is who<\/h3>\n
        \n \t
      • Controller:<\/strong> The organisation that uses the Platform and whose organisation administrators manage the account.<\/li>\n \t
      • Processor:<\/strong> Anrok GmbH, Via Larisch 2, 7031 Laax, Switzerland.<\/li>\n<\/ul>\n<\/div>\n
        \n

        A1.3 Duration<\/h3>\n

        This DPA applies for the entire duration of Platform use and ends upon the complete deletion of all personal data after termination of the contract.<\/p>\n\n<\/div>\n<\/div>\n

        \n

        A2. What we process and why<\/h2>\n
        \n

        A2.1 Nature of processing<\/h3>\n

        We process personal data exclusively for the provision of the KAIZUNO\u00ae Platform. This includes the storage and management of user accounts, the conduct and analysis of AI-powered assessments, the creation of assessment reports and analyses, and the technical operation and security of the Platform.<\/p>\n\n<\/div>\n

        \n

        A2.2 Data subjects<\/h3>\n

        Employees and members of the organisation, as well as third parties invited by the organisation (such as consultants, coaches or partners).<\/p>\n\n<\/div>\n

        \n

        A2.3 Categories of personal data<\/h3>\n

        Contact data (name, email address), account data (role, permissions), assessment data (self-assessments, responses), usage data (activities, timestamps) and billing data (via Stripe).<\/p>\n\n<\/div>\n<\/div>\n

        \n

        A3. Our obligations as Processor<\/h2>\n
        \n

        A3.1 Instruction-bound processing<\/h3>\n

        We process personal data exclusively on the instructions of the Controller. These Terms of Use and this DPA constitute the documented instructions. Further instructions require written form.<\/p>\n\n<\/div>\n

        \n

        A3.2 Confidentiality<\/h3>\n

        All persons entrusted with the processing of personal data at our company have committed to confidentiality or are subject to a statutory obligation of secrecy.<\/p>\n\n<\/div>\n

        \n

        A3.3 Technical and organisational measures<\/h3>\n

        We implement appropriate technical and organisational measures to ensure a level of protection commensurate with the risk. These include encryption of personal data during transmission and storage according to industry standards, access control and authentication, regular security reviews within our capacities, and firewall protection.<\/p>\n\n<\/div>\n

        \n

        A3.4 Sub-processors<\/h3>\n

        We use the following sub-processors:<\/p>\n\n\n\n\n\n\n\n\n\n
        Sub-processor<\/th>\nPurpose<\/th>\nLocation<\/th>\n<\/tr>\n<\/thead>\n
        Amazon Web Services (AWS)<\/td>\nHosting, data storage<\/td>\nSwitzerland<\/td>\n<\/tr>\n
        Amazon Web Services (AWS)<\/td>\nAI processing, email services<\/td>\nEU<\/td>\n<\/tr>\n
        Stripe<\/td>\nPayment processing<\/td>\nEU \/ USA (EU-US DPF, SCCs)<\/td>\n<\/tr>\n
        Wordfence<\/td>\nWebsite security<\/td>\nUSA (SCCs)<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

        All sub-processors are contractually bound to comply with equivalent security standards. The Controller consents to the use of these sub-processors. We will inform you of any changes (additions or replacements) at least 30 days in advance. The Controller may object within 14 days of notification.<\/p>\n\n<\/div>\n

        \n

        A3.5 Assistance<\/h3>\n

        We assist the Controller in fulfilling data subject rights (access, deletion, rectification, data portability), in complying with data breach notification obligations, and in conducting data protection impact assessments where relevant.<\/p>\n\n<\/div>\n

        \n

        A3.6 Reporting data breaches<\/h3>\n

        If we become aware of a breach of personal data protection, we will inform the Controller within 72 hours of becoming aware.<\/p>\n

        Before notification, we are entitled to conduct a reasonable investigation and initial risk assessment. The notification will contain the information available at the time regarding the nature of the breach, the categories of data affected, the likely consequences, and the measures taken or proposed.<\/p>\n\n<\/div>\n<\/div>\n

        \n

        A4. Obligations of the Controller<\/h2>\n
        \n

        A4.1 Lawfulness<\/h3>\n

        The Controller is responsible for the lawfulness of data processing and ensures that a valid legal basis for processing exists.<\/p>\n\n<\/div>\n

        \n

        A4.2 Instructions<\/h3>\n

        Instructions shall be issued exclusively within the framework of applicable law. If, in our view, an instruction violates applicable data protection law, we will notify the Controller in a timely manner.<\/p>\n\n<\/div>\n

        \n

        A4.3 Access management and content<\/h3>\n

        In accordance with the Terms of Use (Section 5), the Controller is solely responsible for granting access rights, inviting external third parties, the nature and scope of data entered, and ensuring that no confidential business information or sensitive third-party data is entered.<\/p>\n\n<\/div>\n<\/div>\n

        \n

        A5. Deletion and return<\/h2>\n
        \n

        A5.1 Deletion of personal data<\/h3>\n

        When the Controller requests deletion or terminates the account, we retain personal data for a reasonable grace period to allow for accidental deletion or later reactivation.<\/p>\n

        After this period, we will delete all personal data in accordance with our Privacy Policy, unless statutory retention obligations or legitimate interests require otherwise \u2014 in particular the preservation of evidence in cases of suspected misuse or unlawful conduct.<\/p>\n\n<\/div>\n

        \n

        A5.2 Data export<\/h3>\n

        Before deletion, the Controller has the right to request an export of data in a machine-readable format (JSON or CSV). We will provide the export within a reasonable timeframe.<\/p>\n\n<\/div>\n

        \n

        A5.3 Confirmation<\/h3>\n

        Upon request, we will confirm the complete deletion of data in writing.<\/p>\n\n<\/div>\n<\/div>\n

        \n

        A6. Audits and controls<\/h2>\n
        \n

        A6.1 Duty to demonstrate compliance<\/h3>\n

        We will make available to the Controller, upon request, the information necessary to demonstrate compliance with the obligations under this DPA.<\/p>\n

        We may also fulfil this obligation by presenting a current self-assessment, security certificate or equivalent documentation.<\/p>\n\n<\/div>\n

        \n

        A6.2 Audits<\/h3>\n

        If the duty to demonstrate compliance under A6.1 cannot be fulfilled by other means, the Controller may have audits conducted by an independent auditor bound by confidentiality.<\/p>\n

        Audits are limited to one audit per 12 months, with at least 90 days’ advance notice, and are to be conducted during normal business hours.<\/p>\n

        The costs are borne by the Controller. The scope is limited to the processing activities relevant to the Controller. Statutory audit rights of supervisory authorities remain unaffected by these limitations.<\/p>\n\n<\/div>\n<\/div>\n

        \n

        A7. International data transfers<\/h2>\n

        Where personal data is transferred to third countries, we ensure that appropriate safeguards are in place \u2014 in particular EU Standard Contractual Clauses (GDPR Art. 46(2)(c)), the EU-US Data Privacy Framework or adequacy decisions.<\/p>\n

        All sub-processors in third countries are covered by corresponding clauses or frameworks (see A3.4).<\/p>\n\n<\/div>\n

        \n

        A8. Applicable law<\/h2>\n

        This DPA is subject to the same law as the Terms of Use (Swiss law, jurisdiction Chur).<\/p>\n

        The provisions of the GDPR and the Swiss nDSG apply supplementarily.<\/p>\n\n<\/div>\n

        \n

        Annex B: Information Security<\/h2>\n

        This Annex is an integral part of the Terms of Use and becomes effective upon their acceptance.<\/strong><\/p>\n\n<\/div>\n

        \n

        B1. Security Standards<\/h2>\n
        \n

        B1.1 Infrastructure<\/h3>\n

        The Platform is operated on Amazon Web Services (AWS). AWS is certified under ISO 27001, SOC 1\/2\/3 and PCI DSS Level 1. Data storage is located in Switzerland, AI processing in the EU (Frankfurt).<\/p>\n\n<\/div>\n

        \n

        B1.2 Encryption<\/h3>\n\n\n\n\n\n\n\n\n\n
        Area<\/th>\nMethod<\/th>\n<\/tr>\n<\/thead>\n
        Data in transit<\/td>\nTLS 1.2+<\/td>\n<\/tr>\n
        Data at rest<\/td>\nAES-256<\/td>\n<\/tr>\n
        Passwords<\/td>\nHashed (bcrypt or equivalent)<\/td>\n<\/tr>\n
        Backups<\/td>\nEncrypted<\/td>\n<\/tr>\n
        API communication (AI)<\/td>\nTLS\/SSL<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n
        \n

        B1.3 Access Control<\/h3>\n

        Password-protected user accounts with minimum requirements, role-based access model, administrative access restricted to authorised persons, developer access via secured connections with individual credentials, principle of least privilege.<\/p>\n\n<\/div>\n

        \n

        B1.4 Network Security<\/h3>\n

        Wordfence firewall for attack protection, brute-force detection and blocking, malware scanning, DDoS protection.<\/p>\n\n<\/div>\n

        \n

        B1.5 Patch and Vulnerability Management<\/h3>\n

        Regular updates of Platform software and plugins. Security updates are applied promptly. Wordfence scans for vulnerability detection.<\/p>\n\n<\/div>\n<\/div>\n

        \n

        B2. Incident Management<\/h2>\n
        \n

        B2.1 Reporting Security Incidents<\/h3>\n

        Security incidents are reported to affected customers within 72 hours of becoming aware.<\/p>\n\n<\/div>\n

        \n

        B2.2 Content of the Report<\/h3>\n

        The report contains, to the extent available at the time: nature of the incident, affected systems and data categories, likely impact, and measures taken or planned.<\/p>\n\n<\/div>\n

        \n

        B2.3 Cooperation<\/h3>\n

        We cooperate in the analysis, root cause investigation and resolution of security incidents and document them.<\/p>\n\n<\/div>\n

        \n

        B2.4 Contact<\/h3>\n

        Security incidents can be reported at any time to: data(at)kaizuno.com<\/p>\n\n<\/div>\n<\/div>\n

        \n

        B3. Data Segregation and Protection<\/h2>\n
        \n

        B3.1 Tenant Separation<\/h3>\n

        Data from different organisations is logically separated. Users can only access data from their own organisation and, depending on their role, their team.<\/p>\n\n<\/div>\n

        \n

        B3.2 Production and Test Environment<\/h3>\n

        Production and test environments are separated.<\/p>\n\n<\/div>\n

        \n

        B3.3 Malware Protection<\/h3>\n

        Automated security scans, firewall protection and system integrity monitoring.<\/p>\n\n<\/div>\n<\/div>\n

        \n

        Annex C: AI Transparency<\/h2>\n

        This Annex is an integral part of the Terms of Use and becomes effective upon their acceptance.<\/strong><\/p>\n\n<\/div>\n

        \n

        C1. AI System in Use<\/h2>\n
        \n

        C1.1 Provider and Model<\/h3>\n

        The Platform uses Anthropic Claude, provided via Amazon Web Services Bedrock (EU region Frankfurt).<\/p>\n\n<\/div>\n

        \n

        C1.2 Purpose of AI<\/h3>\n

        The AI supports various Platform functions \u2014 including the creation of assessment questions, the analysis of responses, the generation of reports and recommendations, and the processing of external information sources.<\/p>\n\n<\/div>\n

        \n

        C1.3 Limitations of Results<\/h3>\n

        AI-generated results may contain inaccuracies, errors or biases. They serve as impulses for self-reflection and do not replace professional expert advice, regulatory inspections or your own duty of care (see Section 9 of the Terms of Use).<\/p>\n\n<\/div>\n<\/div>\n

        \n

        C2. Data Processing by AI<\/h2>\n
        \n

        C2.1 What Data is Transmitted to the AI<\/h3>\n

        Assessment responses, organisational context (industry, size, type of organisation) and general information you enter into the Platform. Depending on the function, the Platform may also retrieve and process information from external sources.<\/p>\n\n<\/div>\n

        \n

        C2.2 Anonymisation<\/h3>\n

        Personal data (name, email) is not transmitted to the AI model. The AI processes assessment content and organisational context, not personally identifiable information.<\/p>\n\n<\/div>\n

        \n

        C2.3 No Training with Customer Data<\/h3>\n

        AWS Bedrock does not store prompts or responses. Input data is not used for training AI models. No user data is transmitted to the AI model provider (Anthropic).<\/p>\n\n<\/div>\n

        \n

        C2.4 Processing Location<\/h3>\n

        AI processing: EU (Frankfurt, AWS Bedrock). Data storage: Switzerland (AWS).<\/p>\n\n<\/div>\n<\/div>\n

        \n

        C3. Automated Decisions<\/h2>\n

        AI outputs are not used as automated decisions within the meaning of GDPR Art. 22. All AI-generated content \u2014 reports, analyses, recommendations \u2014 are analytical results intended for human evaluation and interpretation.<\/p>\n

        The Platform does not make automated decisions with legal or similarly significant effects.<\/p>\n\n<\/div>\n

        \n

        C4. Classification under EU AI Act (Regulation (EU) 2024\/1689)<\/h2>\n
        \n

        C4.1 Classification as an AI System<\/h3>\n

        The KAIZUNO\u00ae Platform is an AI system within the meaning of the AI Act. It is designed for operation with varying degrees of autonomy, operates according to defined objectives (assessment, analysis, report generation), infers from input data how to generate outputs, and produces content, recommendations and analyses.<\/p>\n

        The system has no self-learning capability. Improvements to methodology, assessment logic and processing workflows are made exclusively through human development decisions. Customer data is not used for training AI models.<\/p>\n\n<\/div>\n

        \n

        C4.2 No Prohibited Practices (Art. 5 AI Act)<\/h3>\n

        The Platform does not employ techniques aimed at manipulating the decision-making ability of individuals or exploiting vulnerabilities. There is no social scoring, no facial recognition, no emotion recognition in the workplace, and no biometric categorisation.<\/p>\n

        The Platform provides feedback, inspiration and analyses to support organisational development. Users retain full decision-making freedom at all times.<\/p>\n\n<\/div>\n

        \n

        C4.3 No High-Risk Classification (Art. 6 AI Act)<\/h3>\n

        The Platform is not a safety component of a harmonised EU product and does not fall under the harmonisation legislation listed in Annex I of the AI Act. It is not attributable to any of the high-risk application areas listed in Annex III \u2014 in particular not biometrics, critical infrastructure, education, employment\/human resources management, or essential services.<\/p>\n

        By way of clarification: The Platform analyses topics such as leadership quality, team dynamics and organisational development at an aggregate level. It does not make decisions regarding recruitment, selection, promotion, dismissal or performance assessment of individual persons. There is no profiling within the meaning of Art. 4 No. 4 GDPR.<\/p>\n

        The Platform is intended to improve the results of previously completed human activities (refining assessment inputs into organisational analyses), to identify patterns and deviations, and to perform preparatory tasks for assessments \u2014 without replacing human judgement.<\/p>\n\n<\/div>\n

        \n

        C4.4 Limited-Risk System \u2014 Transparency Obligations (Art. 50 AI Act)<\/h3>\n

        The Platform is classified as a limited-risk system. It is intended for direct interaction with natural persons and generates AI-produced text content (reports, analyses, recommendations).<\/p>\n

        The resulting transparency obligations are fulfilled: AI-generated content is labelled as such (see Section 9 of the Terms of Use).<\/p>\n

        The Platform does not generate deepfakes or manipulated image, audio or video content. It does not perform emotion recognition or biometric categorisation.<\/p>\n

        The Platform may generate text drafts that can be used by the organisation as a basis for external communication (e.g. reports). Responsibility for review, approval and publication lies exclusively with the using organisation.<\/p>\n\n<\/div>\n

        \n

        C4.5 Role of Anrok GmbH<\/h3>\n

        Anrok GmbH developed the Platform and markets it under the KAIZUNO\u00ae brand. It bears the associated obligations as provider, in particular compliance with the transparency requirements under Art. 50 AI Act.<\/p>\n\n<\/div>\n

        \n

        C4.6 General-Purpose AI Models (Art. 51 ff. AI Act)<\/h3>\n

        The Platform uses general-purpose AI models (GPAI), provided through Amazon Web Services Bedrock.<\/p>\n

        The obligations under Art. 53 ff. AI Act for GPAI models apply to the respective model providers. Anthropic Claude is currently deployed.<\/p>\n

        The selection of models is at the discretion of Anrok GmbH; a change of model provider is possible provided the data protection and security requirements described in these Terms of Use are met.<\/p>\n

        The models currently in use are documented in the technical documentation at kaizuno.com.<\/p>\n\n<\/div>\n<\/div>\n

        \n

        Annex D: Service Level<\/h2>\n

        This Annex is an integral part of the Terms of Use and becomes effective upon their acceptance.<\/strong><\/p>\n\n<\/div>\n

        \n

        D1. Availability<\/h2>\n
        \n

        D1.1 Target Availability<\/h3>\n

        We aim for a Platform availability of 97% per calendar month, measured by the reachability of the web application.<\/p>\n

        Excluded are planned maintenance windows, disruptions to third-party services used (e.g. cloud infrastructure, CDN) and force majeure events as defined in Section 12 of the Terms of Use.<\/p>\n\n<\/div>\n

        \n

        D1.2 Maintenance Windows<\/h3>\n

        Planned maintenance is generally announced at least 48 hours in advance. Security-critical updates may be applied without prior notice.<\/p>\n\n<\/div>\n<\/div>\n

        \n

        D2. Support<\/h2>\n
        \n

        D2.1 Availability<\/h3>\n

        Support by email at data(at)kaizuno.com.<\/p>\n

        Support hours: business days (Monday\u2013Friday), 09:00\u201317:00 CET, excluding Swiss public holidays.<\/p>\n\n<\/div>\n

        \n

        D2.2 Response Time<\/h3>\n

        We aim to provide an initial response within 2 business days.<\/p>\n\n<\/div>\n<\/div>\n

        \n

        D3. Backup and Recovery<\/h2>\n
        \n

        D3.1 Data Backups<\/h3>\n

        Daily backup of the database and relevant files. Backups are stored encrypted and overwritten by rotation after a maximum of 90 days.<\/p>\n\n<\/div>\n

        \n

        D3.2 Recovery Targets<\/h3>\n

        In the event of a system failure, we aim for the following targets:<\/p>\n\n\n\n\n\n\n\n
        Parameter<\/th>\nTarget<\/th>\n<\/tr>\n<\/thead>\n
        RTO (Recovery Time Objective)<\/td>\n48 hours<\/td>\n<\/tr>\n
        RPO (Recovery Point Objective)<\/td>\n24 hours<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

        These are target values, not guaranteed commitments. Actual recovery time depends on the nature of the incident.<\/p>\n\n<\/div>\n<\/div>\n

        \n

        D4. Business Continuity<\/h2>\n

        A basic emergency and recovery procedure is in place. This includes automated backups, recovery procedures from backups, and the use of scalable AWS infrastructure for redundancy.<\/p>\n

        Technical operations and Platform recovery are not dependent on any single individual.<\/p>\n\n<\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

        Our terms of use *\u00a0 This is a courtesy translation of the original German document. In the event of any discrepancy between this English translation and the German original, the German version shall prevail. Effective: 1 March 2026 1. What this is about 1.1 Scope These Terms of Use govern the use of the KAIZUNO\u00ae […]<\/p>\n","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"gpsa_enabled":false,"gpsa_required_form_ids":[],"gpsa_require_unique_form_submission":false,"gpsa_access_behavior":"show_message","gpsa_form_redirect_path":"","gpsa_requires_access_message":"","gpsa_access":[],"gpsa_content_loading_message":"","footnotes":""},"class_list":["post-12192","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/kaizuno.com\/fr\/wp-json\/wp\/v2\/pages\/12192","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kaizuno.com\/fr\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/kaizuno.com\/fr\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/kaizuno.com\/fr\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/kaizuno.com\/fr\/wp-json\/wp\/v2\/comments?post=12192"}],"version-history":[{"count":17,"href":"https:\/\/kaizuno.com\/fr\/wp-json\/wp\/v2\/pages\/12192\/revisions"}],"predecessor-version":[{"id":13499,"href":"https:\/\/kaizuno.com\/fr\/wp-json\/wp\/v2\/pages\/12192\/revisions\/13499"}],"wp:attachment":[{"href":"https:\/\/kaizuno.com\/fr\/wp-json\/wp\/v2\/media?parent=12192"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}