Three commitments, by which sovereignty can be measured.
Where your content is stored, who can see it and when it leaves your environment.
Your data stays in Switzerland
Your content is subject to Swiss law. In managed operation it sits encrypted on servers in a Swiss data centre, in self-hosted operation you choose the location yourself. In the standard setup it stays out of reach of the US Cloud Act. Connect an external AI provider and its terms apply to the content you send there.
- nFADP and GDPR
- Standard setup without US Cloud Act
AI only once you switch it on
Collabase AI is optional and enabled per space. You connect the provider of your choice with your own key, whether OpenAI, Anthropic, Gemini or Infomaniak in Switzerland. Without activation every piece of content stays in your environment.
- Opt-in per space
- Your provider, your key
Encrypted, including with us
In managed operation your content sits encrypted on Swiss servers. Collabase cannot technically read it.
- Encrypted at rest
- FADP and GDPR
When the question of data location comes up.
Sovereignty is rarely an end in itself. Usually someone outside the project raises it: an audit, a customer or a new requirement.
- 01
A requirement says that personal data must stay in Switzerland.
- 02
An audit asks who has technical access to your content.
- 03
You want to use AI without handing content to a provider you did not choose yourself.
Two ways to run it, the same commitments.
In both models the data stays in Switzerland and, in the standard setup, outside the reach of the US Cloud Act.
Isolated Cloud
We run your instance on dedicated servers in a Swiss data centre and take care of updates, backups and security.
- Dedicated server in Switzerland
- Updates and security patches
- Backups three times a day
- A named contact person
- Response within 24 hours
Self-hosted
You run Collabase on your own hardware and keep updates, backups and keys in your own hands.
- Runs on any Linux server
- Docker and Kubernetes
- No space or project limit
- Keys stay with you
- Operation without internet access is possible
Evidence for the compliance review
Information security is certified to ISO 27001 and processing meets the nFADP and the GDPR. The documents are ready before you ask for them.
Security and releasesTest Collabase with your own content.
In the proof of concept you work with your own content. That way you answer your audit's questions on the real system before you decide on a licence.