Digital postboxes for bank document
delivery

The DSwiss Enterprise API follows REST conventions and connects our digital mailboxes with your system landscape. This means individual components of the digital mailbox can be integrated into and enrich the user interface of your online banking system.

The DSwiss Enterprise API also enables the simple and secure linking of onboarding and offboarding processes, ensures a secure, cross-system single sign-on, and, by connecting to your output management system, ensures the rapid delivery of numerous documents to your clients.

In January 2017, the European Court of Justice clarified how digital mailboxes must be used in banking. This essentially implies the use of highly secure, digital mailboxes, which are usually connected to e-banking systems. The European Court of Justice (ECJ) defines the requirements as follows:

«An electronic mailbox fulfills the requirements whereby it must be placed on a durable medium, provided it is guaranteed that the information personally addressed to the payment service user can be stored in such a way that he/she can subsequently view it for a reasonable period and that it can be reproduced without any changes.»

– European Court of Justice (ECJ), January 2017

Who says improving a company's carbon footprint has to be expensive? Our digital mailboxes replace paper mail. This not only saves you the cost of expensive paper sending logistics, but also saves vast amounts of paper, which in turn benefits our forests.

Strict data protection is the legal requirement for digital mailing. The European Court of Justice writes: "Any possibility of unilateral modification of its content by the payment service provider or by an administrator entrusted with the management of the website must be excluded." We support banks and financial service providers in meeting the legal requirements of the strictest data protection legislation.

DSwiss goes one step further: to ensure the added protection of your clients' privacy, we pursue a strict zero-knowledge policy. This is manifested in a crypto-architecture that ensures even DSwiss never has access to your clients' login information or stored data and files.

DSwiss encrypts all of your clients' data using highly secure and globally recognized procedures. Using PBKDF # 2 (RFC 2898), the necessary keys are calculated directly from your clients’ passwords, thus offering improved protection of your clients' digital postboxes against intruders.

Cryptographic standards

AES-256 and RSA-2048 are the cryptographic standards used. When sending, the data is encrypted twice via HTTPS and AES-256. As such, the data is still protected even if the HTTPS protection is attacked, for example in so-called man-in-the-middle attacks in internet cafés or airports.

Transparent crypto architecture

A multi-level crypto architecture encrypts all information stored in your clients’ digital postboxes. Our approach has been disclosed in a scientific article and externally checked several times.

The documents and files are stored in two certified data centers in Switzerland that meet the strict requirements of FINMA.

Disaster recovery management means all your clients' documents are mirrored three times and stored in two data centers.

DSwiss operates its own server infrastructure in both data centers, managed by its own system engineers in accordance with the security requirements of NIST BSI, with around the clock monitoring every day.