Data hosted in Switzerland
No Swiss law prescribes in general where data must physically sit; what is required is appropriate protection — but for personal data, public procurement and holders of professional secrecy the location regularly becomes a requirement.
Definition
The right question is not where the vendor is headquartered but where the data centre stands, which subprocessors are involved and which law they are subject to. A Swiss vendor hosting with an American provider delivers Swiss invoices and foreign authority access.
Where data is disclosed abroad, data protection law requires equivalent protection there — via the country list, contractual clauses or other safeguards. That is achievable, but it is a review and not a footnote.
Where to read it
What the software must be able to do
Ask in writing for the data centre location, the list of subprocessors and the applicable law — and for the data processing agreement. A statement on the website is not a commitment.
Checked Aug 2026
More terms under Procurement, operation and data: Client data in Switzerland MediData Partner required Patient data in Switzerland Trust Center