What your organisation gets.
Swiss operation
Servers in Geneva and Winterthur, backups in Infomaniak Swiss Backup. Content is processed in Switzerland only, apart from the upstream web application firewall.
Dedicated resources
Your own VMs, your own database, your own subnet per customer. No resources shared with other organisations.
No US legal framework
Infomaniak is a Swiss company without a US parent. The US Cloud Act does not apply.
Swiss DPA and GDPR compliant
Data processing agreement included. Compliant with the revised Swiss Data Protection Act and the GDPR.
When multi-tenant SaaS is out of the question.
Regulated industries, public administration and organisations with sensitive data need evidence that their data sits in Switzerland and that no other organisation runs in the same application stack. Internal operations teams, in turn, only reach the point where running Collabase themselves pays off at a certain size. Isolated Cloud covers the ground in between.
01
You have data protection requirements that rule out multi-tenant operation.
02
You need to prove Swiss data residency without running the platform yourself.
03
You have no team for application operations, but the requirements of one that does.
Data in Switzerland, under Swiss law.
Swiss operator without US ties
Infomaniak is a family-run Swiss company based in Geneva. No US parent, no US subsidiary, no applicability of the US Cloud Act.
Swiss DPA & GDPR
The data processing agreement is part of the contract. Compliant with the revised Swiss Data Protection Act and the GDPR.
Data centres in Switzerland
Operation and backups run in Geneva and Winterthur. Your content is stored and processed there only, failover included. The one part outside Switzerland is the upstream web application firewall.
Where the separation happens.
In the software, on the infrastructure or in your own data centre. That is what decides who has access and who carries the operation.
Public SaaS (multi-tenant)
All customers share the application and the database. The separation happens in the software.
Fits
Teams without particular requirements on data residency or isolation.
Collabase Isolated Cloud
Your own VMs, your own PostgreSQL instance, your own subnet per customer. Operation, updates and backups sit with us.
Fits
Organisations with data residency or isolation requirements and no operations team of their own.
Self-hosted
Operation on your own infrastructure. Full control, full operational effort.
Fits
Organisations with their own data centre and operations team.
Four layers, independent of each other.
Cloudflare WAF
Every incoming request is inspected before it reaches the Swiss environment: OWASP Top 10, rate limiting, bot detection and DDoS mitigation. This inspection sits upstream of the environment and runs at Cloudflare, and therefore outside Switzerland.
TLS end-to-end
Certificates are issued via Caddy (Let's Encrypt) and renewed automatically.
Network segmentation
Only the floating IP is publicly reachable. App and database run in the private subnet; the database is reachable internally only.
Certified infrastructure
Infomaniak data centers in Switzerland, certified to ISO 27001, 9001, 14001 and 50001.
Critical security vulnerabilities are closed within 24 hours, everything else in the monthly patch window. We announce maintenance work at least 48 hours in advance.
Two layers, restorable even without the production system.
Layer 1: restic → Swiss Backup
Daily logical database backup via pg_dump. restic deduplicates, encrypts client-side and uploads the snapshots to Swiss Backup, independent of the production infrastructure.
- 30 daily, 12 weekly and 6 monthly generations
- Manual backup before every update
- Restorable independently of the underlying infrastructure
Layer 2: block snapshots
Weekly snapshots of the storage volumes directly on Infomaniak OpenStack, as a fast fallback layer for local failures and updates.
- Snapshot of the full volumes
- Fast block-level recovery
- Complements Swiss Backup as a second layer
Recovery times
~15 min
Single file
30 min – 1 h
Single table
15 – 30 min
Rollback before an update
30 min – 1 h
Volume failure
Every environment is created from code.
Terraform provisioning
Network, VMs, volumes and security groups are created via Terraform. A new environment is ready in minutes.
Reproducible VMs
The VMs hold no persistent customer data and can be recreated from infrastructure as code at any time. Customer data lives exclusively on the block storage volumes.
Update process
A manual backup is created before every update. If a migration fails, the rollback completes in 15 to 30 minutes.
Operated at Infomaniak
The Isolated Cloud runs on dedicated VMs at Infomaniak, a Swiss provider with its own data centres in Switzerland. Infomaniak positions itself as an “ethical cloud”: power from renewable sources, server waste heat fed into the district heating network, and no sharing of customer data.
Operations is a craft.
Experience from running it
Collabase is built by consultants who ran and migrated collaboration environments for clients for years. The operating processes come out of that work.
Swiss infrastructure partner
Environments run at Infomaniak, a Swiss provider with its own data centres in Geneva and Winterthur, certified to ISO 27001, 9001, 14001 and 50001.
Traceable operations
Every environment is created from Terraform code. Backup, update and restore processes are documented. Recovery times are measured, not estimated.
Questions from first conversations.
Is Collabase Isolated Cloud a cloud solution or managed hosting?
It is managed hosting on Swiss cloud infrastructure. We run a dedicated environment for every organization on Infomaniak Public Cloud. You share neither application nor database with anyone. The difference to classic SaaS lies in the infrastructure: separation happens at VM, network and storage level instead of in software.
What does 'isolated' mean in practice?
Every environment consists of its own app VM, its own PostgreSQL instance on a separate VM, its own private subnet and its own Swiss Backup space. Each of these resources belongs to exactly one organization. Only the floating IP of your environment is publicly reachable.
Who operates the underlying infrastructure?
Infomaniak, a Swiss provider with its own data centres in Geneva and Winterthur, certified to ISO 27001, 9001, 14001 and 50001. We operate the Collabase stack on top: provisioning, updates, backups and monitoring.
Is our data subject to the US Cloud Act?
Production data and backups are stored exclusively in Switzerland, with a Swiss provider that has no US parent company. Swiss law applies, in particular the revised Federal Act on Data Protection (revFADP). One qualification concerns the upstream web application firewall, see the next question.
Is any traffic processed outside Switzerland?
In one place. Upstream of the environment, a web application firewall from Cloudflare inspects every incoming request before it reaches the Swiss environment. Connection data such as IP addresses is processed outside Switzerland in that step. Storage, processing and backup of your content stay in Switzerland. We are evaluating a Swiss or European replacement.
How quickly is a new environment ready?
Provisioning via Terraform takes a few minutes. Domain, certificate and the import of existing content come on top before productive use. We agree the timeline together during the initialization phase.
Can we move to self-hosting later?
Yes. Collabase is the same software, whether we run it or you run it in your own data centre. Database dump and upload volume can be taken over, and backups sit in an open restic repository. A switch is a move, not a reimplementation.
What does Isolated Cloud cost?
The price combines the Collabase licence per user with the storage package of your environment. Database volumes start at 50 GB, app volumes at 100 GB. We clarify the concrete amount for your organization in the initial consultation.
What happens to our data if we terminate?
You receive a full database dump and the upload volume, plus access to the restic repository holding your backups. After that, production data and backups are deleted within the period agreed in the contract. The procedure is in the contract, not in the fine print.
Let's talk about your environment.
Storage, domain and setup differ per organisation. In a first conversation we work out what your Isolated Cloud environment looks like and what it costs.