Legal requirements for archiving in Switzerland

What companies in Switzerland must comply with by law when it comes to archiving.

Legal requirements in Switzerland

Audit-proof archiving of business records is required by law for companies in Switzerland. It forms the basis for traceability, evidentiary value, and proper corporate governance. At the same time, digitalization is increasing the requirements for processes, systems, and responsibilities.

Why legally compliant archiving is important

Companies are required to retain certain business records in full, unchanged, and for defined periods. Legally compliant archiving not only fulfills statutory obligations, but also provides protection—for example in audits, liability matters, or legal disputes.

Most important is that archived documents...

...are complete and can be found

...retain their integrity over the years

...can be made available within a reasonable time

Electronic archiving is generally permitted in Switzerland. The prerequisite is that the documents correspond to the underlying business transactions and can be made readable at any time.

However, special formal requirements apply to certain documents. For example, management and audit reports must be signed in writing or provided with a qualified electronic signature. Therefore, not every paper document may simply be digitized and the original destroyed.

Paper or electronic—what is permitted?

Which documents must be retained?

In addition, industry-specific requirements—such as in financial services, in the healthcare sector, or for products relevant to liability—may establish further archiving obligations.

Retention periods at a glance

Although the retention period is regulated by law, it may vary depending on the document:

Generally 10 years for business records

Longer periods for certain tax or contract documents

Special requirements in sensitive areas, e.g., healthcare

To ensure that electronic documents remain legally admissible as evidence in the long term, archiving systems must meet minimum technical and organizational requirements.

These include, in particular, protection against subsequent changes (integrity), clear responsibilities and documented processes, long-term readability, regulated migration, and controlled and logged access.

Simply storing data on file servers or in DMS systems is generally not sufficient for this.

Requirements for electronic archiving systems

Archiving personal data: observe data protection

If personal data is archived, the requirements of data protection law also apply. Companies must ensure that:

These requirements also apply to data that has already been archived and must be taken into account when planning an archiving system.

Conclusion: Legally compliant archiving is more than data storage

It requires clear rules, documented processes, and technical solutions that ensure integrity, availability, and data protection over the long term.

Learn even more in our white paper

"Legal requirements for archiving in Switzerland"

With our solutions, you achieve flexible, scalable, and compliance-compliant data archiving

Open vault door with a yellow glow inside

iCAS Classic

iCAS Classic is a flexible middleware for retention management and WORM data archiving. The software solution can be optimally integrated into existing IT infrastructures. While you focus on your core business, iCAS Classic reliably protects the integrity and availability of your data in the background.

iCAS FS

iCAS FS is a scale-out storage platform for a wide range of use cases related to long-term data storage. The software-based platform scales without limits and stands out with low total cost of ownership, ease of use, and high flexibility. Whether as secure backup storage, audit-proof archive, secondary storage, or cost-efficient object storage—iCAS FS meets your requirements in the long term.

Document and folder icon with circuit traces as an image for digital data capture

iCAS Capture

With iCAS Capture, you extend your archiving strategy by directly capturing data from a wide range of sources.

The add-on automatically reads out relevant information and integrates it seamlessly into the shares of iCAS FS or iCAS Classic. The data is then available in an audit-proof manner and can be safely removed from production systems, significantly reducing operational effort, storage requirements, and complexity.

Digitally drawn trash can with document icons flying out

Special Delete Manager

When it comes to data protection, companies are expected to handle personal data professionally and comply with the “right to erasure”. With the Special Delete Manager for iCAS, you can delete archived data easily and in a GDPR-compliant manner before the retention period expires.