Security & privacy on immoz.ch

How immoz.ch protects your documents: they are verified, stored encrypted in Switzerland and only shared in stages, with your consent.

On immoz.ch, prospective tenants and buyers share sensitive documents such as debt collection extracts or payslips. Here we explain – for applicants and for providers – who sees this data and when, and when it is deleted.

1. The essentials

Documents are checked on upload and stored encrypted.
During an application, providers only see what immoz.ch has verified – the documents themselves only once a contract is getting close, and only with your consent.
Every access to a document is logged. You can revoke a share at any time.
Shares end automatically, documents are deleted after fixed periods.
The database and documents are stored on servers in Switzerland. Other services involved are listed in the privacy policy.

2. What happens to an uploaded document

Check on upload: every file is checked for malware and unwanted content. Hidden information in photos, such as the location where they were taken, is removed.
Encryption: documents are stored encrypted using a modern, recognised method. The keys are kept separately from the data.
Safe viewing for providers: shared PDF documents are only shown as an image of each page in an isolated preview. Embedded content such as code, links or attachments is never executed; providers can save a copy that contains only these page images.
Review by immoz.ch: our team verifies identity and documents – for example whether a debt collection extract is recent – and records the result. ID images are deleted after the decision.
Shared only with your application: the provider only gets access once you apply for a property and agree to the share – and step by step (see “Who sees what – and when”).

3. Verification: what we check and what the badges mean

E-mail confirmed: every account confirms its e-mail address. An application is only submitted afterwards.
Identity verified: applicants identify themselves with an official ID and a selfie. Our team compares the details with the profile. The images are then deleted; only the result remains.
Document verified: we check every document individually: is it issued to the right person, recent enough and free of signs of editing? Only verified documents count as met.
Authenticity confirmed electronically: we automatically check electronically signed debt collection extracts on upload – is the PDF unchanged since signing and issued by a debt collection or bankruptcy office?
Provider verified: we check companies in the commercial register, as well as the authority of the person managing the account. Private providers count as verified once their identity is verified.
Application check: before an application reaches the provider, we check that all requested documents are present. Incomplete applications are returned with a note.
Score: the score from 0 to 10 shows how well an application meets the listing’s requirements, how complete it is and how much of it is verified. It does not rate the person and does not replace the provider’s decision.
What a check does not guarantee: we check documents for plausibility and signs of authenticity. Every check is a snapshot – so make important decisions such as signing a contract with the usual care.

4. Who sees what – and when

We follow the recommendations of the Swiss Federal Data Protection Commissioner for rental applicants: during selection, verified information is enough; supporting documents are only needed once a contract becomes concrete. This applies to all providers – companies and private individuals alike.

From the application: name, information on household, employment and budget, motivation letter, score and verified results (for example “proof of salary verified” or “income at least 3× rent met”) – without amounts. Only the debt collection extract can be viewed as a document (for a purchase also the financing confirmation and proof of equity).
From the shortlist: additionally references, employer confirmation, employment contract, insurance certificates and other shared documents.
From the contract or acceptance: additionally payslips and – if requested – ID and residence permit, and only once you release these documents for the contract.
Finding a replacement tenant: the person looking for a successor is not the landlord. They only see verified results, never documents, and hand selected applications over to the property management with your consent.
Wanted ads: providers see your wanted ad without your name or contact details. Only when you reply to an offer do they see your first name and the initial of your surname.
Application pack: whoever receives your pack only sees the key details and what has been verified via the verification link – no documents, no contact details. You can revoke the link at any time; it expires after 90 days.
Team members of a provider only see applications for listings they are responsible for.
immoz.ch only sees documents for verification; every view is logged.
Nobody else. We do not sell data and do not pass it on for advertising.

As soon as a document becomes viewable for the provider, we let you know in the application’s conversation. We do not ask for or pass on criminal record extracts.

5. Storage and deletion

Documents stay in your dossier so you can apply for further properties in a few clicks. You can delete any document at any time.
Documents with an expiry date (for example debt collection extract: 3 months) are then considered expired and are no longer shared.
Shares with providers end automatically 30 days after the listing is closed, on rejection or if you withdraw your application.
We delete rejected documents after 30 days.
Accounts whose e-mail address is not confirmed after an application are deleted after 14 days together with their documents.
If you delete your account, we remove all documents. Under “Privacy” in your account you can also download all your data.
Backups are encrypted as well and are overwritten after a fixed period.

6. For applicants: what to watch out for

Only upload documents via immoz.ch and never send ID copies by e-mail or messenger to strangers.
Never pay a deposit, reservation fee or “viewing fee” before you have seen the property and have a contract. Reputable providers do not ask for this.
Black out what is not needed on payslips (for example social security or account number) – name, employer and amount are enough.
Never share your password or the codes from our e-mails. We never ask for them.
Report suspicious listings via “Report listing”.

7. For providers: your responsibility

Only request the documents you really need for your decision. Data protection law requires proportionality – and fewer hurdles bring more good applications.
Do not ask about marital status, religion, nationality or health; this information is not needed for the selection.
Only use the documents for renting or selling this property and do not pass them on.
Only download documents when necessary, store downloads securely and delete the documents of people not selected as soon as the decision has been made.
Protect your account with a long password of your own and do not use shared logins – team accounts are available for staff.
Decline applications that are not an option. The shares then end immediately.

8. Technical and organisational measures

Connections are always encrypted.
Signing in on a new device requires an additional confirmation; the administration area is additionally shielded.
Documents are never freely accessible, but only delivered after an authorisation check.
Continuous monitoring of our systems, protection against automated attacks and limits on sign-in attempts.
Logging of all security-relevant events, protected against later modification.
Access by our team on a need-to-know basis and regular review of the measures.

9. Questions and security reports

We are happy to answer data protection questions via the contact form. The privacy policy describes all processing in detail. Found a security vulnerability? Please report it to [email protected] – we respond quickly and appreciate responsible disclosure.

Last updated: 26.10.2026