Hosted in Switzerland
Neruna Cloud runs in data centres in Switzerland and is subject to Swiss data protection law.
Neruna Cloud Security
Neruna manages settings – not your data
Your email, calendars and contacts stay on your own mail server – or in Microsoft 365. Neruna Cloud only knows what management requires.
01 What lives where
| What | Where | Can Neruna read it? |
|---|---|---|
| Email, events, contacts | Your mail server – and as an offline copy on the workstations | No – it never passes through us |
| Certificate keys, account passwords | Neruna Cloud, encrypted per device | No – zero knowledge |
| Personal backups | Neruna Cloud, encrypted with the vault password | No – zero knowledge |
| Organisation, profiles, groups, devices, signatures, templates | Neruna Cloud | Yes – that's the configuration |
| Chat messages (if used) | Neruna Cloud | Yes, unencrypted, per your retention |
| Audit log: sign-ins and changes | Neruna Cloud, two years | Yes – without passwords and keys |
02 Principles
No mail, events or contacts
Neruna Cloud stores no mail, events or contacts – only organisation, profiles and configuration.
The chat: the only exception, and optional
If your organisation uses the chat, messages are kept unencrypted in Switzerland, only as long as you decide (1 day to 3 months). Switched off in the portal, nothing is stored and everything existing is deleted.
Certificates: zero knowledge
Private keys are encrypted in the browser and decrypted only on approved devices – the server can never read them.
Accounts and backups: zero knowledge
Mail account passwords and personal backups are encrypted in the browser or the app – the server can never read them. Server settings are signed, so nobody can redirect passwords.
Keys stay on the device
Every workstation signs in with its own key; the private part never leaves the computer.
One-time codes with a separate PIN
Codes work once and expire; an intercepted email alone is never enough to connect.
Pairing phones: zero knowledge
The QR code on the desktop contains a secret that never reaches the server. With it the phone proves its key – the desktop encrypts only for this phone, not for a key the server might slip in.
Open and verifiable
Neruna Desktop is open source – anyone can check how the app talks to the cloud.
Two-factor sign-in
Only those who enter a code from an authenticator app besides the password get into the portal.
Audit log
Who changed what when stays traceable – without secrets getting into the log.
03 Technology
Proven methods, not home-grown crypto.
The details for your IT. How Neruna Desktop itself is built is described on neruna.org.
Technology of Neruna Desktop- Device keysEvery device has its own key pair (ECDSA P-256); the private part never leaves the computer. Sign-in with short-lived tokens.
- Connecting with code and PINOne-time codes are valid once and for a limited time; the PIN comes separately. An intercepted email alone is never enough.
- Zero knowledgeCertificate keys and account passwords are encrypted per device (ECDH P-256, HKDF, AES-GCM).
- Signed settingsAccount server settings are signed – nobody can redirect passwords to another server.
- VaultPersonal backups with a key derived from the vault password (Argon2id) and AES-GCM.
- Two-factor sign-inRequired for portal and administration: a code from an authenticator app (TOTP), with recovery codes; the secret is stored encrypted.
- Audit logSign-ins and every change with person, time and IP address – never passwords, keys or encrypted data, only that they changed.
04 Questions from IT
Answered briefly.
You'll find the privacy policy of Neruna Cloud on its own page.
PrivacyWhere is Neruna Cloud operated?
In data centres in Switzerland; Swiss data protection law applies.
Can Neruna read our email?
No. Email, events and contacts run directly between Neruna Desktop and your mail server – never through Neruna Cloud.
What if a device gets lost?
Block it in the portal. It then receives no more configuration, certificates or account passwords from the cloud.
Who can read the certificate keys?
Only the approved devices. The organisation key is protected by your passphrase; without it or the recovery code nobody can hand out certificates – not even Neruna.
How long are chat messages kept?
As long as you decide: 1 day to 3 months. Switch the chat off and nothing more is stored; existing messages are deleted.
Does Neruna Desktop need the cloud?
No. Neruna Desktop is fully usable without the cloud; the cloud adds central management.
Does Neruna Desktop send data to Neruna?
No usage data. Crash reports only with the person's consent, cleaned of addresses, names, servers and paths, deleted after 90 days.
How is the portal itself protected?
Every sign-in needs a second factor from an authenticator app. Access can be limited to single areas, and the audit log shows who changed what when.