Where your data lives 🇨🇭
Sovereignty isn't a marketing word here — it's the architecture. This page states precisely where your environments run, who touches what, and under which law. Version française.
Hosting
Your SOKKAN Cloud environment runs in Switzerland, on Exoscale (Akenes SA, Lausanne), zone ch-gva-2 (Geneva) — SOKKAN is an Exoscale ISV partner ("Powered by Exoscale"). The SOKKAN control plane and this website are operated by NINABOT in Switzerland. Daily backups are encrypted and stored in Switzerland (Exoscale SOS, Geneva).
- One dedicated private network per client — your machines never share a network segment with another customer.
- No cloud credentials inside your VMs — the control plane holds the keys; your machines never see them.
- Human approval before any billable environment or resource is created.
- Open-source cockpit (github.com/ninabot-ch/sokkan) — the connectors running on your side are auditable. Self-hosting always remains possible: your data, your server.
Inference — two levels, one rule
Product rule: whenever an AI has access to a client's context (the Nina assistant in your cockpit), inference goes through Infomaniak (Switzerland) — mandatory, not configurable.
- Nina (assistant, client context) → Infomaniak, Switzerland. Content never retained.
- Coding sessions (managed inference) → NINABOT gateway to Alibaba Cloud (Frankfurt region, EU). Content never retained, never used for training.
- BYOK → your key, your provider (e.g. Anthropic): your choice.
Subprocessors
The contractual list lives in the DPA; any addition is notified in advance. In short:
| Subprocessor | Role | Location |
|---|---|---|
| Exoscale (Akenes SA) | Environment hosting & backups | Switzerland |
| Infomaniak | Assistant inference (client context) | Switzerland |
| Alibaba Cloud (Germany) GmbH | Managed inference for coding sessions | Frankfurt, EU |
| Stripe | Payments (no card data touches NINABOT) | Ireland, EU |
| Cloudflare | Web routing & protection | US/EU |
| Tailscale | Admin channel (connection metadata only) | Canada |
| Resend | Transactional email | US |
| Anthropic | AI models, only if you choose it (BYOK) | US |
Compliance
- Swiss nFADP & GDPR — public DPA and Terms; Swiss company (Ninabot Sàrl, Geneva, CHE-287.575.522).
- EU AI Act — SOKKAN is a development tool: the human stays in the loop by construction (HITL approvals, full audit trail). We operate no system classified as high-risk.
- Your content is never used to train models — not by us, not through our gateways.
Security
- TLS everywhere; cockpit access via SSO/OIDC; team roles (viewer/dev/admin/owner) and audit log.
- Full security review at v1.0 (inter-tenant isolation validated); responsible disclosure via SECURITY.md.
- Daily encrypted backups, 14-day retention; restore procedures tested.
A specific question? [email protected] — a founder answers.