Swiss data sovereignty: what it actually buys you
“Hosted in Switzerland” has become a marketing sticker. It gets slapped on everything from VPNs to email providers, usually with an Alpine photo and the implication that Swiss servers are somehow beyond the reach of the world. We’re a Swiss company and Fenzly runs on Swiss infrastructure, so we have every incentive to oversell this. Let’s do the opposite and be precise about what it buys you, and what it doesn’t.
What “sovereign” means in Fenzly’s case
Fenzly is built by Logil, a Swiss company, and the stack follows through: our servers run at Infomaniak, a Geneva-based independent host, on infrastructure in Switzerland. Map tiles come from MapTiler, another Swiss company. SMS verification goes through a Swiss provider. Your address searches are proxied through our own backend, so the map provider never sees your IP or your queries.
The point of that list isn’t patriotism. It’s jurisdiction: the company that operates the service, and the companies that physically hold the machines, answer to Swiss law and Swiss courts, not to a foreign parent company’s obligations.
The part that matters: whose law can compel whom
Here’s the thing most “hosted in Europe” claims quietly skip. The US CLOUD Act allows American authorities to demand data from any company under US jurisdiction, regardless of where the servers physically stand. A US cloud provider’s datacenter in Zurich or Frankfurt is still, legally, within reach: what counts is who controls the data, not where the hardware lives.
That’s why “our servers are in Europe” means little when the servers belong to an American hyperscaler. Fenzly’s chain has no US link to pull: a Swiss operator, on a Swiss host’s own infrastructure. A foreign authority that wants something must go through Swiss legal channels, international assistance procedures, examined under Swiss law by Swiss courts, not through a subpoena served at a head office in another country.
On top of that, Switzerland’s data protection law (the revised FADP, in force since September 2023) is recognised by the European Commission as providing an adequate, GDPR-equivalent level of protection. You’re not trading EU-grade rights away for the jurisdiction; you keep both.
What sovereignty does not buy you
Now the honest part, because a Swiss flag is not a force field.
Switzerland is not a lawless haven. Swiss authorities can compel a Swiss company to hand over data with a Swiss legal order, under Swiss law. Sovereignty changes who can knock on the door and under which rules, not whether a door exists. If your threat model is “no government must ever be able to ask anything,” geography alone will never deliver that.
And here’s why our architecture matters more than our address. When a Swiss court orders us to hand over what we have, what we have is what the blind server stores: sealed blobs we cannot open, no location history, no place names, no social graph. Sovereignty decides who may ask; encryption decides what there is to take. The second protection is the one doing the heavy lifting, the first makes sure the asking at least happens under a strict and predictable rule of law.
One genuine exception, named honestly: push notifications. To wake your phone, we go through the only channels that exist, Google’s and Apple’s notification services. That’s a US-controlled hop in an otherwise Swiss chain, and pretending otherwise would be lying. What we do about it: those notifications are wake-up signals, not content. The sealed payload travels through our servers; what transits Google or Apple is essentially “something is waiting for you.” The same logic applies to automatic backups: the halves stored in Google Drive or iCloud are useless fragments of a split key attached to data we already can’t read.
Why we chose it anyway
If encryption does the heavy lifting, why bother with the Swiss stack at all, wouldn’t a hyperscaler be cheaper and easier? Yes, it would. We chose otherwise for three reasons.
Defence in depth: encryption protects content, jurisdiction protects the rest which laws apply, who can compel metadata, how disputes get judged. Alignment: an independent host that lives from hosting fees has no side business in analysing traffic; the incentives point the same way ours do. And accountability: everything sits where our users’ legal rights do, under a privacy law recognised as GDPR-equivalent, enforced by courts down the road rather than across an ocean.
Sovereignty is not the wall. It’s the ground the wall is built on.
Next: how Fenzly finds your friends without ever seeing your address book, the contact discovery problem, and why most apps solve it by simply taking everything.