Compliance & Swiss Jurisdiction
Absolute data sovereignty under strict Swiss federal law (FADP / DSG). Full immunity from foreign extraterritorial legislation and state surveillance.
01.01 // Swiss Datenschutzgesetz (FADP)
Strict statutory protection of personal data, independent of EU or North American pressure.
01.02 // US Cloud Act immunity
Physical and legal separation preventing foreign authorities from compelling disclosure through foreign subpoenas.
Jurisdictional Comparison
Physical jurisdiction versus extraterritorial legislation.
| Parameter | US Cloud Act — foreign jurisdiction | Swiss FADP — sovereign jurisdiction |
|---|---|---|
| Authority access | Administrative order, no judge required | Formal mutual legal assistance only |
| Territorial reach | Extraterritorial, including EU regions | Strictly within Swiss jurisdiction |
| Client notification | Can be barred by gag order | Client is informed in principle |
| Legal basis | US Cloud Act (2018) | FADP / nLPD + Swiss constitution |
| Risk profile | High | Zero |
Authority access
Administrative order, no judge required
Formal mutual legal assistance only
Territorial reach
Extraterritorial, including EU regions
Strictly within Swiss jurisdiction
Client notification
Can be barred by gag order
Client is informed in principle
Legal basis
US Cloud Act (2018)
FADP / nLPD + Swiss constitution
Risk profile
High
Zero
Certified Standards
- ISO 27001
- Information security & risk management
- ISO 27018
- Protection of personal data in the cloud (PII)
- ISO 27017
- Cloud-specific security controls
- ISO 14001
- Environmental management
- ISO 50001
- Energy management system
Encryption & Key Management
End-to-end encryption with unique hardware-level keys. No backdoor access, no central key escrow. Only the sovereign owner controls the decryption keys.
- AES-256
- At-rest encryption on volumes inside Swiss jurisdiction.
- TLS 1.3
- Enforced on every endpoint; legacy suites refused.
- DNSSEC
- Signed zones against cache poisoning and spoofing.
- HSTS preload
- Browser-enforced HTTPS, no downgrade path.
Encryption layer: AES-256 active & verified