Terms and conditions

As of 25.10.2026 (draft, legal review pending). The German version is authoritative.

1. Scope

These General Terms and Conditions (GTC) apply to the use of the igs.ch platform ("Inbox Guard Switzerland", hereinafter "platform"). The provider is Hunkeler Digital Services, Richard Hunkeler, Im Storchen 1, 8212 Neuhausen am Rheinfall, Switzerland (hereinafter "igs.ch"). Customers are organisations and partners with an account (hereinafter "customer"). These GTC apply to all plans, including the Free plan, which is free of charge; the provisions on prices and payment apply only to paid plans. The data processing agreement (section 9) forms part of these GTC.

1a. Customer base

• igs.ch is intended for organisations, in particular businesses, associations, federations, schools, municipalities and other public bodies, in Switzerland and in the rest of the German-speaking region. Sole proprietorships are deemed organisations. The platform is not intended for private individuals.
• Partners (e.g. IT service providers) may use the platform for several client organisations. They ensure that they are authorised to do so by these organisations.
• There is no entitlement to the conclusion of a contract. igs.ch may refuse registrations and orders without giving reasons.

2. Services

• igs.ch supports the customer in introducing e-mail authentication for its domains (SPF, DKIM, DMARC, MTA-STS). The customer adds its domains, proves ownership via a DNS record or a file on its website and directs the DMARC aggregate reports (rua) to the report address that igs.ch generates for each domain.
• igs.ch receives the aggregate reports, evaluates them and shows which servers and services send e-mails in the name of the domain (sender inventory), with check results, notes and recommendations for the next step. Senders are identified using a catalogue of known services, reverse DNS and the network operator (ASN); the assignment may be incomplete or incorrect.
• igs.ch checks the public DNS records of the customer's domains (SPF, DKIM, DMARC, MTA-STS including the policy file, TLS-RPT, DNSSEC) daily and on request.
• igs.ch does not process forensic reports (ruf); if any are received, they are discarded without evaluation.
• The aggregate reports are created and sent by the recipients' mail providers. igs.ch has no influence on whether, when and how completely they arrive. The evaluation is therefore not exhaustive; a result without findings does not mean that all senders have been captured and correctly configured.
• igs.ch recommends DNS records (e.g. the next step of the DMARC policy) as text, but does not change the customer's DNS itself. The customer decides on changes and is responsible for implementing them. A stricter policy (quarantine or reject) may cause e-mails from senders that are not authorised or not correctly configured to be rejected or classified as unwanted. The approval of a step by a main user is a decision of the customer; the recommendation is based only on the signed reports received.
• The scope of the plans (Free, Project, Partner) is set out in the price list on igs.ch. Further functions are only available once igs.ch offers them on the platform; these GTC apply to them.
• In the Project and Partner plans, igs.ch provides the MTA-STS policy of a domain on request (hosted MTA-STS). The customer sets the DNS records shown (CNAME for mta-sts.<domain>, TXT for _mta-sts and _smtp._tls) and keeps them up to date; igs.ch takes care of the certificate, delivery and the list of mail servers according to the MX records. The policy starts in testing mode; a main user releases enforce mode. In enforce mode, mail providers that support MTA-STS reject delivery if no validly encrypted connection to a listed mail server is possible; the customer is responsible for its mail servers, their certificates and changes to them. If the customer switches MTA-STS off or changes to the Free plan, igs.ch sets the policy to none and removes it once its validity has expired; the customer then removes the DNS records. igs.ch evaluates TLS-RPT reports in all plans.
• On the Project and Partner plans, the customer may assign tasks to persons without an account (externals) via a time-limited link. It only assigns persons it is entitled to engage for this purpose and informs them that igs.ch processes their information on its behalf. igs.ch sends e-mails on tasks from order@igs.ch; if the assigned person replies by e-mail, the reply appears in the task history provided the sender is confirmed (valid signature matching the sender's domain); otherwise igs.ch decides whether to add it.
• igs.ch does not provide legal, security or business advice. Recommendations are general guidance; the customer decides on measures.

3. Account and access

• When registering, the customer provides truthful information and keeps it up to date.
• Login requires a password and an authenticator app; the second factor is mandatory. The customer keeps login data, recovery codes and devices secret and protected and informs igs.ch immediately of any misuse.
• The main user invites further users by e-mail, manages their roles (main user, editor, viewer) and is responsible for their actions.

4. Customer obligations

• The customer only adds domains it is entitled to dispose of or for which it has been mandated by the holder, and proves their ownership. igs.ch does not evaluate reports for domains without proof; they are kept for at most 7 days and then deleted.
• The customer uses the report address only for the corresponding domain. Reports whose domain does not match the report address are discarded.
• The customer does not misuse the platform, in particular not to burden report addresses with messages that are not DMARC aggregate reports, to obtain data on third-party domains or to circumvent security measures.
• The customer is the controller of the personal data in the aggregate reports of its domains; igs.ch processes it as processor in accordance with section 9. The customer only invites further users insofar as it is entitled to do so.

5. Prices and payment

• The Free plan is free of charge. For paid plans, the prices and plans according to the price list on igs.ch at the time of ordering apply; the Project plan is charged per domain and month. For an annual subscription, the discount according to the price list applies. Orders are placed in the customer area under «Account → Subscription and payment».
• igs.ch may adjust prices and the scope of the plans. For running subscriptions, changes apply from the next term; igs.ch announces them at least 30 days in advance.
• The subscription is invoiced in advance for the chosen term. A higher plan or additional domains apply immediately and are charged pro rata for the remaining term; a lower plan, fewer domains or a different billing cycle apply from the next term.
• Payment is made by invoice with a QR payment slip.
• Invoices are payable within 10 days. Public administrations receive a term of 30 days on request. The paid functions are activated once payment has been received.
• Prices include any applicable Swiss value added tax, which is shown on the invoice. For businesses in the EU with a valid VAT number, the reverse charge mechanism applies. Any withholding taxes or similar levies in the customer's country are borne by the customer; the invoice amount is payable without deduction.
• Invoices, reminders and notices are delivered exclusively electronically (e-mail and customer area); there is no postal delivery.
• igs.ch issues the invoice for the next term 20 days before it begins and announces the due date 7 days in advance. In case of late payment, igs.ch sends reminders on the due date and after 3 days. If the invoice is not paid 4 days after the due date, access to the paid functions is suspended; the data remains readable. Once payment is received, everything continues seamlessly. A first order that is never paid is cancelled.

5a. Partners

• Partners keep client accounts in their account for the organisations they look after and act there with their role in the partner account. Towards igs.ch they are responsible for these client accounts as for their own account, in particular for the organisation's mandate and for compliance with these terms.
• The Partner plan is booked for all domains of the partner and its client accounts together and invoiced to the partner with a collective invoice. The price per domain follows the tiers of the price list for the total number booked. The debtor is the partner.
• If the partner's subscription is suspended or ends, this also applies to its client accounts (sections 5 and 6). At the organisation's request and with the partner's consent, a client account can be continued as an account of its own.

6. Term, cancellation and deletion

• An account on the Free plan runs for an indefinite period. igs.ch may change or discontinue the Free plan with 30 days' notice.
• The subscription to a paid plan renews for the chosen term unless it is cancelled before expiry. Cancellation is possible at any time in the customer area with effect from the end of the current period and can be withdrawn until then.
• igs.ch may block or terminate the account with immediate effect in case of serious breaches of these GTC.
• 90 days after suspension for non-payment or after the end of the subscription, the account and all its data are irrevocably deleted unless the customer reactivates the subscription or switches to the Free plan. When switching to the Free plan, one domain chosen by the customer and its data are retained within the scope of the Free plan. igs.ch reminds the customer of the upcoming deletion by e-mail every 10 days. Until then, the customer can download its data in the customer area. igs.ch keeps invoices for the statutory period.
• If the customer removes a domain, igs.ch deletes the associated report data. Reports that subsequently reach the report address of this domain are no longer evaluated and are deleted; the customer removes the reference to igs.ch from its DMARC record.
• The customer may close the account at any time under "Account → My data", provided there are no further users and no invoice is open. The account is deleted immediately with all content and logins; amounts already paid are not refunded. Invoices are deleted as soon as they have been filed in igs.ch's accounting.

7. Availability

igs.ch strives for high availability of the platform but does not owe any specific availability. Maintenance is announced where possible. Reports are fetched and evaluated at intervals; evaluations and checks may be delayed for technical reasons or because of third parties (e.g. mail providers, name servers).

8. Liability

• igs.ch is only liable for damage caused intentionally or by gross negligence. Liability for slight negligence, for auxiliary persons, for indirect and consequential damage and loss of profit is excluded to the extent permitted by law.
• igs.ch is not liable for damage arising because reports do not arrive, arrive late or are incomplete, a sender was not detected or was incorrectly assigned, or a recommendation was misinterpreted, in particular not for e-mails that are not delivered, are rejected or are classified as unwanted after a change to the customer's DNS records, nor for decisions the customer makes based on the results.
• Liability is in any case limited to the amounts paid by the customer in the last twelve months.

9. Data protection and processing on behalf

• The platform runs on a dedicated igs.ch server in a data centre in Strasbourg (France), where the data is also stored. Encrypted backups are kept in Switzerland. Details are set out in the privacy policy.
• igs.ch processes account data as controller in accordance with the privacy policy.
• igs.ch processes the personal data in the aggregate reports of the customer's domains (in particular IP addresses of sending mail servers) on behalf of the customer. igs.ch processes it only to provide the services, protects it appropriately, uses sub-processors only in Switzerland or with adequate protection, supports the customer with requests from data subjects and deletes the data after expiry of the time limits or at the end of the contract.
• The details are governed by the data processing agreement published on igs.ch. It forms part of these GTC. By accepting these GTC during registration, the customer also concludes the data processing agreement; no separate consent is required. In case of conflict, it takes precedence over these GTC with regard to the protection of personal data. Changes are made in accordance with section 11.

10. Intellectual property

The platform, its content, the catalogue of known services and the instructions are protected. For the term of the contract, the customer receives a non-transferable right to use them for its own purposes. It may use evaluations and recommended DNS records internally and towards its service providers, auditors and authorities. The data from the aggregate reports of its domains belongs to the customer.

11. Changes

igs.ch may amend these GTC including the data processing agreement. Changes are communicated to the customer in advance by e-mail or on the platform. If the customer does not object within 30 days, they are deemed accepted; in case of objection, the customer may terminate at the end of the term or close an account on the Free plan at any time.

12. Applicable law and jurisdiction

Swiss law applies, excluding the Vienna Convention. Place of jurisdiction is Schaffhausen, unless mandatory provisions provide otherwise. The German version is authoritative.