Where your data lives 🇨🇭
Sovereignty isn't a marketing word here — it's the architecture. This page states precisely where your environments run, who touches what, and under which law. Version française.
Hosting
Your SOKKAN Cloud environment runs in Switzerland, on Exoscale (Akenes SA, Lausanne), zone ch-gva-2 (Geneva) — SOKKAN is an Exoscale ISV partner ("Powered by Exoscale"). The SOKKAN control plane and this website are operated by NINABOT in Switzerland. Daily backups are encrypted and stored in Switzerland (Exoscale SOS, Geneva).
- One dedicated private network per client — your machines never share a network segment with another customer.
- No cloud credentials inside your VMs — the control plane holds the keys; your machines never see them.
- Human approval before any billable environment or resource is created.
- Open-source cockpit (github.com/ninabot-ch/sokkan) — the connectors running on your side are auditable. Self-hosting always remains possible: your data, your server.
Inference — two levels, one rule
Product rule: whenever an AI has access to a client's context (the Nina assistant in your cockpit), inference goes through Infomaniak (Switzerland) — mandatory, not configurable.
- Nina (assistant, client context) → Infomaniak, Switzerland. Content never retained.
- Coding sessions (managed inference,
sokkan-ship/sokkan-deep) → NINABOT gateway: served first from NINABOT's own GPUs in Geneva (Switzerland), with automatic fallback to EU-hosted providers in France (Scaleway, OVHcloud) when Geneva is saturated or down. Content never retained, never used for training. - Swiss tier (
sokkan-swiss) → Geneva GPUs, overflow only to Infomaniak (Switzerland). Requests never leave Switzerland. - BYOK → your key, your provider (e.g. Anthropic): your choice.
Subprocessors
The contractual list lives in the DPA; any addition is notified in advance. In short:
| Subprocessor | Role | Location |
|---|---|---|
| Exoscale (Akenes SA) | Environment hosting & backups | Switzerland |
| NINABOT (own hardware, no subprocessor) | Coding inference, primary (Intel Arc Pro B60) | Geneva, Switzerland |
| Infomaniak | Assistant inference (client context) · Swiss-tier overflow | Switzerland |
| Scaleway SAS | Coding inference, fallback only | Paris, France (EU) |
| OVH GmbH (OVHcloud group) | Coding inference, fallback only | France (EU) |
| Stripe | Payments (no card data touches NINABOT) | Ireland, EU |
| Cloudflare | Web routing & protection | US/EU |
| Tailscale | Admin channel (connection metadata only) | Canada |
| Resend | Transactional email | US |
| Anthropic | AI models, only if you choose it (BYOK) | US |
Compliance
- Swiss nFADP & GDPR — public DPA and Terms; Swiss company (Ninabot Sàrl, Geneva, CHE-287.575.522).
- EU AI Act — SOKKAN is a development tool: the human stays in the loop by construction (HITL approvals, full audit trail). We operate no system classified as high-risk.
- Your content is never used to train models — not by us, not through our gateways.
Security
- TLS everywhere; cockpit access via SSO/OIDC; team roles (viewer/dev/admin/owner) and audit log.
- Full security review at v1.0 (inter-tenant isolation validated); responsible disclosure via SECURITY.md.
- Daily encrypted backups, 14-day retention; restore procedures tested.
A specific question? [email protected] — a founder answers.