Sovereignty
Where your evidence is processed, and who controls it.
Certification and security-evidence work means handing IX sensitive evidence about your business. So where that evidence is hosted, where it is processed, and who controls those choices are fair questions to ask before you start. This page answers them plainly. It is not a sales argument. It is what is true today, what is direction, and what IX does not claim.
Definition
What sovereignty actually means
Sovereignty and residency often get used as if they were the same thing. They are related, but they are not the same. Residency is where your data is stored. Sovereignty is about control over hosting, processing routes, access, vendors, and jurisdictional exposure. Where a server sits matters, but it is not the whole question, and that is why IX uses the word carefully on this page.
What is true today
European processing is the default.
For European customers, IX data is hosted in Switzerland. Processing with a US touchpoint is not used automatically; it is documented and decided deliberately beforehand.
For European customers
- Hosting in Switzerland.
- Processing in Europe, where available and appropriate.
- Document, AI, or model processing with a US touchpoint only after a deliberate decision.
- No automatic transfer of your content into US systems.
Where a US touchpoint is required
- Purpose, service, and data scope are clarified beforehand.
- The decision is yours.
- The use is documented.
- For US customers, separate storage and processing paths apply.
Direction
Where this is heading
For IX, sovereignty is an operating posture and a direction, not a finished, absolute state. The direction is to prefer European processing where it is available and appropriate. We are honest that this is a posture we operate and keep building on, not a box that is fully ticked.
Limits
What IX does not claim
Being clear about the limits matters more here than anywhere. So, plainly:
- IX makes no claim of complete or absolute sovereignty.
- Swiss hosting and residency are not the same as sovereignty.
- IX offers no legal immunity from jurisdictional claims.
- None of this is a substitute for your own legal advice.
For your engagement
Documents are processed further only deliberately.
For European customers, processing in Switzerland and in Europe is the starting point. Before documents flow into processing with a US touchpoint or into an AI or model system, we clarify purpose, service, data scope, and any redactions.
If that processing is not sensible or not wanted for your case, it stays off. The decision is yours.
For US customers, separate storage and processing paths apply.
Bring your concerns to the call
If processing, jurisdiction, or data handling is a live concern, raise it on the call.
If processing, jurisdiction, or data handling is a live concern for you, raise it on a scoping call. We will be specific about your case rather than general about ours.
Want to see the method first? See how it works.