Sovereignty
Where your evidence is processed, and who controls it.
Certification and security-evidence work means handing IX sensitive evidence about your business. So where that evidence is hosted, where it is processed, and who controls those choices are fair questions to ask before you start. This page answers them plainly. It is not a sales argument. It is what is true today, what is direction, and what IX does not claim.
Definition
What sovereignty actually means
Sovereignty and residency often get used as if they were the same thing. They are related, but they are not the same. Residency is where your data is stored. Sovereignty is about control over hosting, processing routes, access, vendors, and jurisdictional exposure. Where a server sits matters, but it is not the whole question, and that is why IX uses the word carefully on this page.
Current posture
What is true today
The current posture depends on whether you are a US customer.
For non-US customers
- Your data is hosted in Switzerland.
- IX prefers European processing where available and appropriate.
- Before any processing begins, you decide the document flow. That decision includes whether US-based or US-exposed LLM processing may be used at all, and whether IX redacts documents before any such processing. Those choices are yours to make, not an automatic promise from us.
For US customers
- Your data is stored and processed in the US. The European processing posture above does not apply to you.
Direction
Where this is heading
For IX, sovereignty is an operating posture and a direction, not a finished, absolute state. The direction is to prefer European processing where it is available and appropriate. We are honest that this is a posture we operate and keep building on, not a box that is fully ticked.
Limits
What IX does not claim
Being clear about the limits matters more here than anywhere. So, plainly:
- IX makes no claim of complete or absolute sovereignty.
- Swiss hosting and residency are not the same as sovereignty.
- IX offers no legal immunity from jurisdictional claims.
- The European processing posture does not cover US customers.
- None of this is a substitute for your own legal advice.
For your engagement
What this means for your engagement
For non-US customers, you control the document flow before processing begins. You decide whether US-based or US-exposed LLM processing may be used, and whether documents are redacted before any such processing. If these choices matter to your situation, we set them with you at the start.
For US customers, your data is stored and processed in the US.
Bring your concerns to the call
If processing, jurisdiction, or data handling is a live concern, raise it on the call.
If processing, jurisdiction, or data handling is a live concern for you, raise it on a scoping call. We will be specific about your case rather than general about ours.
Want to see the method first? See how it works.