Is Switzerland GDPR compliant?

Switzerland has its own law — the FADP — not GDPR directly. But the EU confirmed Switzerland's data protection as adequate in January 2024, meaning personal data flows freely between the EU and Switzerland without Standard Contractual Clauses. The revised FADP (2023) closely mirrors GDPR in scope, breach reporting, and extraterritorial application.

Can the US CLOUD Act reach data stored in Switzerland?

Not if the company hosting the data isn't American. The CLOUD Act applies to US-incorporated companies and their subsidiaries. A Swiss or European company hosting data on Swiss servers is outside its jurisdiction entirely. That's why corporate structure matters as much as server location.

What is the Swiss FADP?

The Federal Act on Data Protection (FADP) is Switzerland's national privacy law. The revised version (September 2023) introduced penalties up to CHF 250,000, mandatory breach reporting, expanded sensitive data categories to include biometric and genetic data, and extraterritorial scope.

Why doesn't Ciphera host data in the EU instead?

EU GDPR is strong, but EU member states are part of intelligence-sharing alliances (Nine Eyes, Fourteen Eyes) and subject to EU-level bulk data directives. Switzerland provides consistent, strong, nationally unified protection — no variation between states, no intelligence-sharing obligations, and a 25-year track record of EU adequacy.