Trust Center · Our commitments

Data protection charters

Two audiences, two charters. These are commitments, not contract terms; the contract terms are in our agreements.

Version 1.0 of 25 October 2026

For the people in the room

Reps who use MIHOS, and the clients they meet.

01
Nothing is recorded without everyone's agreement.

The rep must confirm that every participant was informed and agreed. MIHOS keeps that confirmation, with its time and wording, and processes no recording without it.

02
A meeting serves only the company that recorded it.

Its content personalises MIHOS for that company and for no one else. At every provider that offers the option, we switch off the use of that content to improve its models.

03
No one reads your emotions.

MIHOS infers no emotion and no personality, and derives no sensitive trait from what you say.

04
A machine judges no one.

Scores are indicative. Every decision about a rep is taken by a person, and every score points back to the passage that produced it for as long as the transcript is kept.

05
Your voice signature is yours.

It exists only if you explicitly agree, never for the people you meet, and is deleted when you withdraw your consent.

06
Recordings do not linger.

Audio is deleted after 90 days by default, and a participant who withdraws consent can ask the company to delete the recording, its transcript and its analysis.

07
You can ask what is kept about you.

Ask the company you work for or met with. We send it what it needs within 10 working days.

For organisations

Companies that deploy MIHOS, and their IT and data protection teams.

01
We act on your instructions only.

You are the controller of your teams' data. We process it as your processor, under a written agreement.

02
You know where every byte goes.

Data at rest in Switzerland; every provider, country and safeguard in the sub-processor list, sent on request.

03
No new provider without 30 days' notice.

You have 30 days to object on reasonable grounds and, failing a solution, can terminate the services concerned.

04
A data security breach is reported within 48 hours.

At the latest, with what we know, so that you can meet your own obligations.

05
You may audit us.

On reasonable notice and at your expense, as provided in the data processing agreement.

06
Your data leaves with you.

At the end of the contract: export, deletion including at our sub-processors, and written confirmation.

07
We claim nothing we do not have.

No certification we have not obtained. Measures still being deployed are listed with their dates.