SWISS CLOUD · COMPLIANCE

Sovereign Swiss cloud hosting: Infomaniak, Exoscale, Swisscom, Safe Swiss Cloud, Hostpoint, Cloudsigma compared

Six Swiss cloud providers compared May 2026: region, ISO 27001, FINMA suitability, GPU availability, price. Practical guide to sovereign hosting in Switzerland.

Researched & fact-checked by: DuneDive LLC · As of: 2026-05

What does "sovereign" mean for Swiss hosting?

Sovereign hosting means: data and infrastructure are subject exclusively to Swiss law. Concretely (a) server location in Switzerland, (b) operator seat in Switzerland or with a Swiss legal subsidiary, (c) no extraterritorial access rights of foreign authorities to data without Swiss mutual legal assistance, (d) staff with security clearance. Hosting on a Swiss region of a US hyperscaler (e.g. AWS Zurich, Azure Switzerland North, Google Cloud Zurich) is not fully sovereign – the US CLOUD Act lets US authorities access data of US subsidiaries even when servers stand in Switzerland.

The distinction becomes increasingly relevant in May 2026. First, due to FINMA Circular 2018/03 (Outsourcing) and SN 08/2024 – banks must safeguard supervisability for critical outsourcings. Second, due to FADP Art. 16-18 (cross-border transfer) and the recurring debate around the Swiss-US Data Privacy Framework, which could be withdrawn at any time. Third, due to professional secrecy SCC Art. 321 for lawyers, doctors, fiduciaries – US access to secrecy-bound data is criminally liable for the principal.

The Swiss cloud landscape May 2026 is clearly structured. Six providers dominate: Infomaniak (Geneva, ecologically positioned), Exoscale (Zurich, Akamai subsidiary), Swisscom Business Cloud (Bern/Zurich, telecom subsidiary), Safe Swiss Cloud (Embrach ZH, FINMA-specialised), Hostpoint (Rapperswil, classic host with cloud extension), Cloudsigma (Zurich, technical pioneer). Alongside them are further smaller providers (smino, oneon, plusserver Switzerland, Equinix Switzerland) and the Swiss regions of the hyperscalers.

Why the provider choice shapes the compliance posture

The host choice is not just a cost and performance question but legally loaded. Three dimensions matter.

First: jurisdiction sovereignty. With a purely Swiss host (Infomaniak, Hostpoint, Cloudsigma, Safe Swiss Cloud), legal clarity is high – Swiss law and Swiss authorities apply. With Swiss subsidiaries of international groups (Exoscale is Akamai/US-owned, Swisscom as federal subsidiary is Swiss, plusserver is German), the picture is more complex. With US hyperscalers on Swiss regions (AWS, Azure, GCP), the CLOUD Act position is legally contested – US political pressure can also reach CH-subsidiary data.

Second: FINMA suitability. Banks and insurers review outsourcing contracts for supervisability under Circular 2018/03. Providers with FINMA-specific contract architecture (Safe Swiss Cloud explicitly, Infomaniak and Swisscom with bank experience) have advantages here. AWS, Azure and GCP offer FINMA-compliant models via Swiss regions plus contract addenda – the negotiation effort is higher though.

Third: GPU availability for AI workloads. Self-hosted LLMs (Apertus, Mistral, Llama) need NVIDIA GPUs (H100, H200, B200 from 2025/26). Swiss GPU availability is limited: Infomaniak expanded its GPU offering from 2024, Exoscale offers GPU instances, Cloudsigma sporadically. Safe Swiss Cloud and Hostpoint have only limited GPU options. Hosting Apertus 70B yourself needs 2x H100 80GB (about CHF 8,000-12,000/month) – a scarce commodity in May 2026.

Six providers compared (May 2026)

Infomaniak (Geneva). Swiss family-owned, around 280 staff. Three data centres in the Geneva region, fully hydropower and waste-heat use. ISO 27001, ISO 50001, ISO 14001. FINMA contracts confirmed for bank mandates. GPU: NVIDIA L40S and H100 available, tiered. LLM hosting for Mistral and Llama as a curated service (kAI). Price: transparent, often in the lower third of Swiss providers. Strong in DE/FR/IT multilingualism. Weakness: smaller global region diversity than hyperscalers.

Exoscale (Zurich, Akamai subsidiary). Formerly A1 Telekom Austria, since 2022 part of Akamai (USA). Data centres in Zurich, Vienna, Frankfurt, Munich, Sofia, Geneva. ISO 27001, FINMA-compliant with context-specific contract. GPU: A100 and H100 available, well-documented. API-centric with strong Kubernetes offering. Price: mid-tier. Weakness: Akamai parent in the USA brings the CLOUD Act discussion back for highly sensitive data.

Swisscom Business Cloud (Bern/Zurich). Subsidiary of Swisscom AG (federal majority). Data centres in Bern and Zurich. ISO 27001, ISAE 3402, FINMA-accepted with its own bank hosting programme (Swiss Banking Cloud). GPU available via partnership with Hewlett-Packard. Price: premium segment. Strong with very large mandates with public-sector links. Weakness: high complexity, long contract processes.

Safe Swiss Cloud (Embrach ZH). Specialist for banks and insurers. Data centre in Embrach. ISO 27001, FINMA-compliant contract package out of the box, with audit rights and sub-processor control. Price: mid-premium. GPU availability limited (announced May 2026 for H2 2026). Strong in wealth management and SMEs under professional secrecy. Weakness: smaller scale, less globality.

Hostpoint (Rapperswil). Swiss hosting classic, owned by management. Classical web hosting with cloud extension. ISO 27001. Very strong in SME web hosting and client mail hosting. Cloud offering smaller than Infomaniak/Exoscale, GPU not in the standard portfolio. Price: budget. Weakness: not a primary choice for AI workloads.

Cloudsigma (Zurich). Swiss cloud pioneer since 2009, Swiss-owned. ISO 27001. Highly flexible compute model (granular CPU/RAM quotas). GPU sporadically available (A100). Price: mid-tier. Strong with tech-affine clients, less with classical SMEs. Weakness: smaller scale, less banking experience.

Choosing sovereign hosting in 6 steps

01Data classification: which data is particularly sensitive (FADP Art. 5 lit. c)? Which is secrecy-bound (SCC Art. 321)?
02Supervisory exposure check: FINMA-supervised? AMLA SRO member? Sector-specific supervision (FOPH, ESTV, RAB)?
03Workload profile: classical (web, database, mail) or AI workload (LLM inference, embedding, fine-tuning)?
04Provider shortlist: 2-3 providers fitting the first three axes – Infomaniak/Exoscale/Safe Swiss Cloud are typical May 2026 combinations.
05Contract review: DPA, FINMA clauses, sub-processor list, audit rights, data location guarantee, migration clause.
06Pilot phase: 2-3 months with non-critical workloads, performance and support test, then production roll-out.

Which provider for which profile

The choice depends on four axes: sovereignty requirement, FINMA exposure, GPU need, price sensitivity.

Highest sovereignty (professional secrecy doctors/lawyers/fiduciaries with wealth mandates): Infomaniak, Safe Swiss Cloud, Hostpoint, Cloudsigma as purely Swiss providers. Exoscale (Akamai subsidiary) and US hyperscalers only with strengthened contract clauses and risk acceptance.

FINMA exposure (banks, insurers, asset managers): Safe Swiss Cloud (out-of-the-box), Swisscom Business Cloud (established), Infomaniak (with bank track record). Exoscale and hyperscalers possible with higher contract effort.

GPU need (self-hosted LLM, own embedding models, fine-tuning): Exoscale, Infomaniak, Cloudsigma. Excluded: Safe Swiss Cloud (H2 2026 expected), Hostpoint (not in portfolio), Swisscom Business Cloud (only via Hewlett-Packard partner path).

Price sensitivity (SMEs with classical workloads, no FINMA exposure): Hostpoint, Infomaniak (mid-tier with good value), Cloudsigma (flexible). Swisscom Business Cloud and Safe Swiss Cloud sit in the premium range.

Combination examples May 2026: fiduciary office with 30-50 clients and a wealth component → Infomaniak for standard, Safe Swiss Cloud for wealth holdings. Bank with 200 staff → Safe Swiss Cloud or Swisscom Business Cloud for critical data, Exoscale for AI inference. SME in industry → Infomaniak or Hostpoint.

When a non-Swiss provider is the better fit

Three patterns argue for cloud providers outside Switzerland.

Global scaling need. Anyone serving customers across multiple continents (e.g. SaaS product with US/EU/Asia customers) needs region diversity that Swiss providers do not offer. AWS, Azure and GCP are the standard choice, with a CH region for highly sensitive Swiss data as an island.

Specialised services. Cognitive services such as specific vector DBs (Pinecone, Weaviate Cloud), specific LLM hostings (Anthropic Claude direct, OpenAI direct), specific ML pipelines (Databricks, Snowflake Cortex). Swiss providers are not directly competitive here – building it would take years.

Small workloads without sensitivity. A test environment, a marketing website, an internal doc host. The sovereignty debate is excessive here – standard hyperscaler EU region (Frankfurt, Dublin) suffices.

Combination strategies May 2026: hybrid setup with a "sovereignty island" on a Swiss provider for secrecy-bound data and a "standard cloud" on a hyperscaler for everything else. Data routing must be clearly documented – otherwise the sovereignty island gets leaky through cross-cloud spills.

This is not narrow hosting advice. Concrete selection depends on many factors not exhaustively addressed here. Binding advice requires examination of concrete workloads, data classification, contract terms and regulator position.

Trade-offs

STRENGTHS

Jurisdiction sovereignty is high and clear at purely Swiss providers
FINMA-compliant contract packages out of the box at Safe Swiss Cloud and Swisscom
Infomaniak delivers the best price-performance with GPU availability in May 2026
Hydropower/waste-heat model at Infomaniak and Hostpoint reduces CO2 footprint

WEAKNESSES

Prices typically 1.3-2.0x above AWS Frankfurt – noticeable at scale
Region diversity weak – insufficient for globally scaling SaaS
Specialised services (Pinecone, Databricks, Snowflake) missing at CH providers
GPU availability tight – wait times of 2-8 weeks possible under scarcity

FAQ

Is AWS Zurich "Swiss hosting"?

Geographically yes, legally partly. AWS Schweiz GmbH is a Swiss subsidiary, servers stand in Switzerland, daily business follows Swiss law. But: AWS Schweiz belongs to Amazon.com, a US group. The CLOUD Act lets US authorities access data of US subsidiaries even when servers are in Switzerland. For secrecy-bound data (SCC 321), this is a residual risk – strengthened contract clauses and encryption help but do not eliminate the risk. Banks and insurers with high FINMA sensitivity therefore prefer purely Swiss providers.

Who has the best GPU availability in Switzerland in May 2026?

Infomaniak and Exoscale are the two providers with productive H100 availability. Cloudsigma has A100 occasionally. Safe Swiss Cloud arrives in H2 2026 with an H100 cluster. To self-host Apertus 70B (2x H100 80GB minimum), first ask Infomaniak and Exoscale. For smaller LLMs (Mistral 7B, Llama 3 8B), A100 or L40S suffices and availability is better. CSCS (Swiss National Supercomputing Centre) has H100/H200/B200 for research but is not commercially generally available.

How expensive is Swiss hosting versus EU hyperscalers?

Rule of thumb May 2026: 1.3-2.0x more expensive than AWS Frankfurt, depending on workload. CPU/RAM instances typically sit 30-50 percent above EU hyperscaler prices, GPU instances 20-40 percent. Storage is mostly 1.5-2x pricier. Egress traffic at Swiss providers is often cheaper or included, which equalises total cost of ownership for data-intensive workloads. For small workloads, the absolute extra cost is small (CHF 50-200/month).

Can I use Swiss hosting for LLM provider inference?

Limited. Infomaniak offers curated LLM hosting for Mistral and Llama (kAI service). Direct Swiss inference access to OpenAI, Anthropic, Google via a Swiss subsidiary is not productive as of May 2026 (Azure OpenAI with Switzerland North region comes closest but is Microsoft, not sovereign-CH). Anyone wanting Swiss sovereignty plus top frontier models must currently fall back on Apertus (ETH/CH, open-weight) or Mistral hosting at a CH provider – top frontier like the current top GPT model or the current top Claude model is not available sovereign-CH.

Sources

Infomaniak – Datacenter und Hosting-Services · 2026-05
Exoscale – Schweizer Cloud-Plattform · 2026-05
Swisscom Business Cloud – Banking Cloud · 2026-05
Safe Swiss Cloud – Hosting für Banken und Versicherer · 2026-05
Hostpoint – Webhosting und Cloud · 2026-05
Cloudsigma – Schweizer Cloud-Pionier · 2026-05
US CLOUD Act – Justice Department Erläuterung · 2024-04

FITS YOUR STACK?

This is not narrow hosting advice. We assess data classification, supervisory exposure and workload profile, and design hosting setups with Infomaniak, Exoscale, Safe Swiss Cloud or Swisscom. Initial call free of charge.

Book a call