Most discussions about secure storage stop at encryption. That's the easy part. The harder question is what happens when someone — a court, a regulator, a foreign agency — knocks on the door of your provider and asks for your data. The answer depends almost entirely on which country's door it is.

The two questions encryption can't answer

End-to-end encryption gives you a strong promise: your provider cannot read your records. Even if they wanted to. Even if compelled. That's a real promise, and we mean it.

But two questions remain. First: can your provider be forced to hand over metadata — who has access, when records were created, with whom they were shared? Second: can your provider be forced to change the system in ways that would weaken future protection? In some jurisdictions, the answer to both is "yes, quietly, with no obligation to tell you."

Switzerland's quiet advantage

Switzerland's Federal Data Protection Act (revFADP, in force since 2023) treats personal data as a fundamental right of the data subject — not as an asset of the company holding it. Three consequences flow from that:

  • Foreign disclosure orders are scrutinised. A Swiss provider cannot simply comply with a subpoena from another country. Mutual legal assistance treaties apply, and Article 271 of the Swiss Penal Code makes unauthorised cooperation with foreign authorities a criminal offence.
  • Bank–client confidentiality has a 90-year head start. The same legal architecture that gave Swiss banking its reputation now applies, by analogy, to digital custody providers operating under Swiss law.
  • Notification of access requests is the default. Where lawful, Swiss providers must inform you when your data has been requested — not the other way around.
Encryption tells the world you can't read the data. Jurisdiction tells the world you don't have to try.

Where the data sits, literally

None of the above matters if the bytes themselves are stored elsewhere. We host every customer's vault in two Swiss data centres — one in the canton of Vaud, one in Zürich — with no replication, no backup, and no metadata leaving Swiss territory. Our key custody is performed by hardware security modules certified to FIPS 140-3 Level 3, on Swiss soil, by Swiss operators.

What this means for you

If you live in Switzerland, you already understand why this matters. If you don't, the practical case is simple: a vault held under Swiss law gives you legal certainty about who can access your records, under what conditions, with what notice — independent of where you live, where your provider is based, or where political winds happen to be blowing this year.

That certainty isn't a feature we built. It's a feature of the country we built in.

⚑

One promise, two layers

End-to-end encryption protects your records from us. Swiss jurisdiction protects them from everyone else. We're proud of both, and we won't compromise on either.