Common questions

Whatever your business already uses. Ojava watches Windows PCs, Microsoft 365 and Google Workspace: connect one, two or all three, for the same price. Microsoft 365 and Google Workspace connect in a few minutes; Windows PCs are in early access and we set them up with you, also without Microsoft 365 or Google Workspace.

20 people fit the Professional plan (6 to 35 people): CHF 180 a month. 8 Windows PCs would add 8 × CHF 10 = CHF 80, so CHF 260 a month; during early access PCs are free, so today you pay CHF 180. Yearly: CHF 1’944 for the plan + 8 × CHF 108 for the PCs = CHF 2’808 (today CHF 1’944). VAT: none, Ojava is not VAT-registered, so these are the final amounts. In Switzerland you start with a 14-day free trial.

It only detects and alerts. Ojava does not block, delete, quarantine or change anything in your accounts or on your PCs; it tells you what happened and what to do first, and a person on your side decides. Keep your antivirus and Microsoft’s or Google’s own protections switched on: Ojava watches next to them, it does not replace them.

Every alert appears in your dashboard. Critical alerts are emailed at once to the owner and the admins, always; high alerts too, unless someone turned them off in their settings (alerts about a person’s own account always go to the owner and admins). Your CEO or IT person can also get critical and high alerts by email without an Ojava login (Settings → Alert contacts). Monitoring runs day and night, weekends included, and emails go out at any hour. Ojava is not a staffed 24/7 security centre: nobody at Ojava acts on your alerts at night; our support replies on business days (2 days, next day or same day, depending on the plan). A second contact on another domain (for example your IT provider) can get critical alerts too. SMS for critical alerts is planned for later. No phone calls.

Honestly: we don’t know yet. Ojava is new and we have not measured a false-alarm rate on enough businesses to publish a number. What we do: the rules are tuned for small businesses, identical signals are grouped for an hour so you get one email instead of many, each explanation says how likely a harmless cause is, and you can mark an alert as a false alarm in one click. We will publish a measured figure once we have one.

Microsoft 365: any business plan (Business Basic, Standard, Premium, E3, E5) with auditing on, which is the default. Sign-ins arrive within minutes with Entra ID P1 (included in Business Premium, E3 and E5); without it, they come with the other audit events, 60 to 90 minutes later. Google Workspace: any business edition from Business Starter; personal Gmail accounts are not supported. In both cases an administrator approves the read-only access once. Windows PCs: Windows 10 or 11.

The agent is small: it reads Windows’ own logs and sends a short report every minute; we have not published performance measurements yet, and early-access customers have not reported slowdowns to us. It works next to Microsoft Defender or another antivirus and does not replace it; if your antivirus quarantines the installer (not code-signed yet), have it allowed. To uninstall: in Ojava, Devices → the PC → Remove device (the agent removes itself at its next contact), or run the same installer file again on the PC and choose Uninstall.

We recommend it in every case, and in Switzerland and the EU it is usually required (data protection and employment rules); ask your adviser if unsure, this is not legal advice. Tell them before you start, in writing (email or internal notice): what Ojava watches (sign-ins and account changes, and on PCs program starts and file activity, never the content of emails or documents), why (to detect attacks), who sees the alerts (the owner and admins), how long data is kept (events 90 days, raw Windows PC events 30 days) and whom to ask. Employees with an Ojava login see only their own PCs and sign-ins.

Your monitoring data (sign-ins, alerts, PC events, reports) is stored in Switzerland, at Infomaniak in Geneva, on an encrypted disk (AES-256). Encrypted backups are kept by Infomaniak Swiss Backup, in its Swiss data centres. The EU recognises Switzerland as a country with adequate data protection. Payments: Stripe (Ireland), for card payments outside Switzerland. We never see full card numbers. Email: Resend (USA) sends our emails; our own mailboxes are at Microsoft (Ireland). AI: Anthropic (USA) writes the alert explanations. Names, email addresses, IP addresses and PC names are replaced by placeholders before anything is sent. Domain and DNS: Infomaniak (Switzerland). Designed for the Swiss data protection act (FADP/nLPD) and the GDPR. A data processing agreement (DPA) is available.

Detection is rule-based: rules we wrote and tested decide whether something is an alert, and how serious it is (critical, high, medium). The AI (Anthropic’s Claude) then writes the plain-language explanation and the steps to fix it, in your language. It never sets the severity or the alert title, it cannot change anything in your accounts or PCs, and names, email addresses, IP addresses and PC names are replaced by placeholders before anything is sent to it. If the AI is unavailable, the alert still arrives with a standard explanation.

Yes. Your data is stored in Switzerland, in Geneva, on an encrypted disk. We never read your emails or documents: Ojava only sees sign-in events, file activity activity data (metadata) and audit logs.

No. Ojava never reads the content of your emails, documents, or files. We only see activity data (metadata): who logged in, from where, what files were accessed, and when. Email content stays private.

A few minutes for Microsoft 365 or Google Workspace: click Connect, sign in once as an administrator, and Ojava starts monitoring, with nothing to install. Windows PCs are in early access: request it in your dashboard; once we approve it, Devices → Add a Windows PC gives you the setup to run on each PC (about 10 minutes for the first one), or we set it up with you. New versions show as Update available and install over the old one.

Ojava checks around the clock. It reads Microsoft 365 and Google Workspace every 5 minutes; Microsoft publishes most audit events 60 to 90 minutes after they happen and Entra sign-ins usually within minutes, Google most events within minutes and app-access events within a few hours. A PC agent reports every minute. As soon as an event reaches Ojava you get the alert by email, critical ones always.

Yes. Ojava works in English, French, German and Italian. It is built in Geneva and serves businesses across Switzerland and Europe.

Monthly plans can be cancelled at any time and end at the end of the month. Yearly plans renew each year: to stop the renewal, cancel at least 1 month before the plan year ends; a later cancellation takes effect at the end of the following plan year. You cancel under Settings → Billing → Cancel plan, or by writing to billing@ojava.ch. After your trial or plan ends, we keep your data for 30 days in case you come back, then it is permanently deleted. You can export or request earlier deletion anytime from your account or by writing to privacy@ojava.ch.

By Swiss bank transfer using the QR code on your invoice. We send invoices by email, monthly or yearly. Your invoice includes a standard Swiss QR-Rechnung that you scan with any Swiss e-banking app. No credit card required.

That is exactly who Ojava is built for. Ojava detects the problem, explains it and tells you how to fix it, step by step. If you can read an email, you can use Ojava.

Ojava was founded in Geneva by Dhanush Kalyan Guntaka. Company details and contact in the legal notice →