Nereva relies on AWS in Switzerland to host its platform

User safety at the heart of the design

Security does not only concern information systems: it directly concerns the women and men who use the platform every day. Site managers, drivers, dispatchers and administrative teams rely on Nereva to organise frequent operations, often in constrained environments.

Nereva’s infrastructure, hosted with AWS in Switzerland, contributes to this safety through authenticated access, role-based rights that limit each user to the information and actions they need, and information kept up to date between the office, the cab and the site during missions.

Compliance, data location and user protection

The platform’s data, personal data included, is hosted in Switzerland, in the AWS Zurich region (eu-central-2). During missions, heavy-vehicle route calculation goes through HERE, in the European Union, and other technical providers listed in the DPA may be involved. Any transfer outside Switzerland or the European Economic Area is governed by the customer’s authorisation or by appropriate safeguards, in accordance with the data processing agreement.

A reliable infrastructure for safe operations

Site flows need tools that are available during operating hours. Nereva’s commitments on this point are those of its contractual documents, as obligations of means: regular data backups and documented recovery procedures; a business continuity plan and a disaster recovery plan reviewed periodically, with indicative objectives of a 24-hour recovery point and a 48-hour recovery time; scheduled maintenance outside working hours and announced in advance; notification of a data breach no later than 72 hours after becoming aware of it.

Security and international standards

The security measures described in the data processing agreement include encryption of data in transit (TLS 1.2 or higher) and at rest, backups included, access control according to the principle of least privilege, strengthened authentication for administrative access and logging of sensitive actions. AWS data centres in Switzerland are certified ISO 27001 and according to equivalent frameworks; AWS also publishes its compliance programmes, including SOC 2 and CSA STAR. These certifications and programmes are those of AWS, the platform’s hosting provider.

A foundation to focus on the platform

By relying on an established hosting provider, Nereva concentrates its efforts on the platform itself: synchronisation between companies, field applications and proof of execution. This technical basis also makes it possible to deploy the platform in other countries, with the same rules on data location and sub-processing, described in the contractual documents.

In summary

Nereva hosts its platform with AWS, in the Swiss region of Zurich. AWS is a hosting provider listed in the DPA, HERE a mapping provider listed in the DPA; the security and continuity commitments are those of the contractual documents. The details are presented on the Data hosting and Security pages.