Data privacy for brokers in Switzerland: using AI tools under the revised FADP

AI can dramatically cut the catch-up work after client meetings. But for brokers and financial advisors in Switzerland, every new tool raises the same question first: is this compatible with data protection? The answer depends less on whether AI is involved and far more on where your data is processed.

This article is a practical overview. It is not legal advice. Have your specific workflows reviewed by a qualified professional before relying on them.

What matters under the revised FADP?

The revised Federal Act on Data Protection (revFADP) has applied since September 2023. For day-to-day work with client data, three points matter most:

• Transparency. Clients must know that their data is processed and for what purpose.
• Purpose limitation and proportionality. You process only the data you need for the stated purpose.
• Data security. You protect the data with appropriate technical and organisational measures.

Client meetings often contain particularly sensitive data, for example about health, finances, or family. That raises the duty of care, but it does not rule processing out.

Where does the real risk in AI tools sit?

With most AI note tools, the risk is not in the recording. It is in the upload. Many services send the audio or transcript to a server, often abroad. That creates a disclosure to a third party and possibly a cross-border transfer, which has to meet additional conditions.

This is exactly where a cloud tool and local processing differ. If the data never leaves your computer, the most sensitive category of risk is removed from the start.

How does local processing help?

FinPortal processes recording, transcription, and AI analysis on your own computer. The audio does not leave your laptop. In practice that means:

• No cross-border transfer of the conversation to a transcription service
• Fewer third parties to list in your record of processing activities
• A simpler, more honest answer when a client asks where their data goes

This does not replace informing your clients. But it makes living up to the principles much easier, because there are fewer moving parts.

What should you tell your clients?

Keep it simple and transparent. At the start of the meeting, mention that you record the conversation to prepare your notes, that the processing happens locally on your device, and that the client can object. That short notice builds trust and satisfies the transparency duty at the same time.

A practical checklist

• Actively inform clients about the recording and its purpose
• Prefer tools that process locally rather than in the cloud
• Keep a record of your processing activities and third-party services
• Limit access and retention to what is necessary
• Have sensitive workflows reviewed by a legal professional

Good data protection and less admin are not in conflict. The opposite is true. A tool that runs locally saves you the catch-up after the meeting and lowers your privacy risk at the same time. How that changes the working day is covered in how brokers save hours after every meeting, and how it is bundled into software for insurance brokers is on the solution page.

Want to try it with your own team? Start the 14-day pilot. Nothing is charged until day 14.