02 / Security

Compliance & Swiss Jurisdiction

Absolute data sovereignty under strict Swiss federal law (FADP / DSG). Full immunity from foreign extraterritorial legislation and state surveillance.

01.01 // Swiss Datenschutzgesetz (FADP)

Strict statutory protection of personal data, independent of EU or North American pressure.

01.02 // US Cloud Act immunity

Physical and legal separation preventing foreign authorities from compelling disclosure through foreign subpoenas.

// DATAFLOW SCHEMA

Sovereign data path

Three stages between your device and Swiss jurisdiction. Select a stage for technical detail.

[ PATH // ACTIVE ]SECURE FLUX

STEP 01 // Brussels, Belgium

Runtime: No third-party scripts, no cookies, no fingerprinting
Key material: Device-local; private keys never leave the endpoint
Legal basis: GDPR — controller in the EU

STEP 01 // Brussels, Belgium

Runtime: No third-party scripts, no cookies, no fingerprinting
Key material: Device-local; private keys never leave the endpoint
Legal basis: GDPR — controller in the EU

// Our fixed choice — Swiss, hydroelectric

A / Jurisdiction

Jurisdictional Comparison

Physical jurisdiction versus extraterritorial legislation.

Parameter	US Cloud Act — foreign jurisdiction	Swiss FADP — sovereign jurisdiction
Authority access	Administrative order, no judge required	Formal mutual legal assistance only
Territorial reach	Extraterritorial, including EU regions	Strictly within Swiss jurisdiction
Client notification	Can be barred by gag order	Client is informed in principle
Legal basis	US Cloud Act (2018)	FADP / nLPD + Swiss constitution
Risk profile	High	Zero

Authority access

01

US Cloud Act — foreign jurisdiction

Administrative order, no judge required

Swiss FADP — sovereign jurisdiction

Formal mutual legal assistance only

Territorial reach

02

US Cloud Act — foreign jurisdiction

Extraterritorial, including EU regions

Swiss FADP — sovereign jurisdiction

Strictly within Swiss jurisdiction

Client notification

03

US Cloud Act — foreign jurisdiction

Can be barred by gag order

Swiss FADP — sovereign jurisdiction

Client is informed in principle

Legal basis

04

US Cloud Act — foreign jurisdiction

US Cloud Act (2018)

Swiss FADP — sovereign jurisdiction

FADP / nLPD + Swiss constitution

Risk profile

05

US Cloud Act — foreign jurisdiction

High

Swiss FADP — sovereign jurisdiction

Zero

B / Certification

Certified Standards

ISO 27001: Information security & risk management
ISO 27018: Protection of personal data in the cloud (PII)
ISO 27017: Cloud-specific security controls
ISO 14001: Environmental management
ISO 50001: Energy management system

C / Encryption

Encryption & Key Management

End-to-end encryption with unique hardware-level keys. No backdoor access, no central key escrow. Only the sovereign owner controls the decryption keys.

AES-256: At-rest encryption on volumes inside Swiss jurisdiction.
TLS 1.3: Enforced on every endpoint; legacy suites refused.
DNSSEC: Signed zones against cache poisoning and spoofing.
HSTS preload: Browser-enforced HTTPS, no downgrade path.

Encryption layer: AES-256 active & verified

D / Export

Dossier Export

Blauwdruk-export — A4, print-optimalisatie