Dedicated Servers in Switzerland: Hardware, Privacy and Swiss Law in 2026

People shopping for dedicated servers in Switzerland are usually buying two things at once. One is hardware: real cores, real disks, nobody else on the box. The other is jurisdiction, and that half gets sold with far more confidence than the facts support.

This guide separates them. What a dedicated machine genuinely changes about your exposure, what Swiss law does and does not do, what is currently moving through Bern that could change it, and what the hardware actually costs.

What a dedicated server changes that a VPS does not

On a VPS your operating system runs inside a hypervisor somebody else controls. That is not a scandal, it is how virtualisation works, but it has consequences worth stating plainly.

The main one concerns memory. Full disk encryption on a VPS protects the disk at rest, but the decryption key lives in RAM while the machine is running, and the hypervisor layer can reach that memory. On a dedicated server there is no provider-controlled hypervisor sitting underneath your operating system with routine access to guest memory. The datacentre still has physical access and, on hardware that offers it, out-of-band management access. So dedicated hardware removes one important layer of exposure rather than eliminating provider access altogether.

Second, you share nothing. No noisy neighbour, no shared IP reputation, no other customer on the same box whose behaviour draws attention to the hardware you happen to be sitting on. Fair-use terms that aggregate across services on a shared host simply stop applying when the host is yours alone.

Third, scope narrows. If a machine has to be examined, a dedicated server contains one customer's data. A shared virtualisation node does not. In practice authorities usually prefer targeted requests to pulling hardware, but it is still a real difference in how entangled your environment is with strangers.

What it does not change: the provider still receives legal process, the datacentre still has hands on the metal, and the network path is still somebody else's. Dedicated hardware raises the floor. It does not make you untouchable.

What Swiss jurisdiction actually gives you

Switzerland's principal federal data-protection statute is the revised Federal Act on Data Protection, in force since 1 September 2023. It governs data processing according to its own territorial scope, which reaches circumstances having an effect in Switzerland even where they were initiated abroad, and it is enforced by the Federal Data Protection and Information Commissioner rather than an EU authority. Hosting in Switzerland does not, however, remove obligations you may have under foreign law. Our guide to Swiss data protection law and hosting goes through what the FADP genuinely protects.

For a foreign authority seeking data held in Switzerland, the route is mutual legal assistance. That means a formal request, Swiss review, and, where coercive measures are required, the principle of dual criminality. It adds procedural steps and puts a Swiss decision-maker in the middle rather than giving a foreign authority unrestricted direct access. It is friction and independent review, not a wall.

Where e-Evidence really lands, and why "outside the EU" is not the whole answer

From 18 August 2026, the EU e-Evidence Regulation gives competent judicial authorities in the member states a much faster route to electronic evidence, with production deadlines of ten days and eight hours in emergencies. It is the biggest change to cross-border data access in European hosting in two decades, and we cover the mechanics in our guide to the EU e-Evidence Regulation and what it means for hosting customers.

Here is the part most Swiss hosting pages get wrong. Switzerland is outside the EU, but that does not mean a provider using Swiss infrastructure is automatically outside the Regulation. The framework is built to cover service providers offering services in the Union regardless of where they are established, and hosting and cloud services are within its contemplated scope. Providers in scope without an EU establishment are required to appoint a legal representative in the Union to receive and act on orders.

So Swiss server location remains a genuine jurisdictional distinction, and it changes which national law governs the data and which authority reviews access to it. It should not be described as an escape from e-Evidence. Anyone selling it to you that way either has not read the Regulation or is hoping you have not.

Switzerland is not outside surveillance law either

Swiss surveillance rests on the BÜPF and its implementing ordinance, the VÜPF. The framework divides obligated parties into telecommunications service providers and providers of derived communication services, and the relevant supervisory body, the Dienst ÜPF, treats online storage, file hosting and cloud services as derived communication services. Its own guidance uses a company acting as a hosting provider for third parties as a worked example. Hosting is therefore inside the framework, not outside it.

What actually determines your exposure is which category and which tier a provider falls into. Under the current rules, the heaviest obligations on a derived communication service, including six-month retention of metadata, apply only where several conditions are met together: annual turnover of CHF 100 million, a large part of the business consisting of such services, and a minimum subscriber count. Most providers sit well below that and hold only the data they already have.

The proposed revision would change those lines. The draft sent for consultation in January 2025 would have attached an identification duty, meaning storing IP addresses to identify users, from around 5,000 users, with six-month metadata retention above one million. It drew opposition across the political spectrum, from industry associations, and from Proton, Threema and NymVPN, some of whom said publicly they would consider leaving Switzerland.

Where it stands now matters more than the headlines from last year. Parliament passed motions requiring a fundamental rewrite and a fresh consultation. On 11 February 2026 the Federal Council took note of the consultation report, commissioned an external regulatory impact assessment, and announced a second consultation. A revised draft circulated privately in February 2026 and published in May raised the identification threshold from 5,000 users to 100,000, which would put small and mid-sized Swiss mail and hosting services outside it, while keeping the contested core duties intact.

None of it is law. No version has been adopted or brought into force. But the honest summary is not "Switzerland has no surveillance regime," it is "Switzerland has one, hosting sits within it, the thresholds decide what applies to you, and those thresholds are actively being renegotiated." We watch this file closely, and we will say so here when it moves.

Our dedicated servers in Switzerland: the full lineup

We run seven dedicated servers in Switzerland, split into two families that suit very different workloads.

Modern single-socket, unlimited bandwidth

Fewer cores but much faster ones, NVMe throughout, software RAID-1 by default, same-day delivery. This is the right family for web applications, game servers, databases, VPNs and anything sensitive to single-thread performance.

Dual-socket, high core count

Enterprise hardware built for parallel work: virtualisation, build farms, video encoding, many concurrent containers, heavy database concurrency. Five dedicated IPv4 addresses each and 10G networking on the upper two. Delivery is 24 to 48 hours rather than same day.

One thing worth understanding about the dual-socket family: 128 threads at 64GB of RAM is a deliberately core-heavy ratio. If your workload is memory-hungry rather than thread-hungry, the Core Ultra box at less than half the price will serve you better. Buy the shape of your workload, not the biggest number on the page.

Where a setup fee applies, it reflects what our upstream charges us for provisioning, and it is waived entirely on terms of six months or longer.

Switzerland or Finland

We run dedicated servers in both, and in 2026 the pricing comparison has become unusually clear. Dedicated servers in Switzerland currently cost less than the identical dual-socket hardware in Finland, because our Finnish upstream restructured its pricing in mid-June 2026 and raised monthly rates.

Finland has its own advantages that pricing does not capture. The Finnish AD-series machines are newer generation with DDR5 and larger NVMe arrays, they carry unmetered bandwidth on a 1 Gbit port, and the Finnish Xeon Gold and EPYC boxes include IPMI KVM, which the Swiss lineup does not currently list. If out-of-band console access is a requirement for you, that is a real point in Finland's favour and you should ask us before ordering rather than assume.

The jurisdictional trade is the interesting one. Finland is in the EU, which means it is directly inside the e-Evidence system as an issuing and executing state. Switzerland is not, though as covered above that is a distinction rather than an exemption. We compare the two legal environments properly in Finland vs Switzerland hosting in 2026, and score fourteen countries against each other in the Hosting Jurisdiction Index.

Ordering without identity documents

Signup takes an email address and a password. We do not ask for identity documents, at signup or later, on any product including dedicated servers. There is no verification step that appears once the order value crosses a threshold.

Payment can be made in Bitcoin or Monero through our own BTCPay Server instance, which we run ourselves rather than routing through a third-party processor. That matters more than it sounds, because a hosted payment gateway sees your transaction data whatever your host's policy says. We explain the reasoning in why we run our own BTCPay Server, and cover the Monero side in Monero hosting in Switzerland. Fiat options are available for anyone who prefers them.

Practical setup on a Swiss dedicated box

Encrypt the disks yourself. LUKS full disk encryption is meaningfully stronger on dedicated hardware than on a VPS, because there is no hypervisor with a routine view of your memory. Since dedicated servers in Switzerland do not currently include an out-of-band console, configure Dropbear in the initramfs so you can unlock the volume over SSH after a reboot. Test that before you put anything on the machine you cannot afford to lose access to.

Decide your logging policy deliberately. Legal process reaches what exists. A dedicated server means you control what exists. Shorten retention to what you actually need to operate, and be honest with yourself about which logs you have never once read.

Use the RAID-1 you are given. The single-socket Swiss plans ship with software RAID-1 by default across two NVMe drives. That is redundancy against drive failure, not a backup. Keep an off-server backup regardless, encrypted before it leaves the box.

Check the AUP before you build, not after. Tor exit nodes are not permitted in either location. Running a VPN is explicitly allowed and needs no separate approval. Worth confirming against your plans before you provision.

Frequently asked questions

Does GDPR apply to a server in Switzerland?

Not because of where the server is. GDPR can still apply depending on the controller's or processor's establishment and activities, including where a business outside the EU offers goods or services to people in the Union or monitors their behaviour. Server location is not the test.

Does the EU e-Evidence Regulation apply to Swiss hosting?

It can. The Regulation is aimed at service providers offering services in the Union regardless of where they are established, and hosting and cloud services fall within its contemplated scope. Swiss location changes which law governs the data and which authority reviews access to it, but it is not an automatic exemption from the framework.

Does Switzerland require data retention from hosting providers?

Hosting is treated as a derived communication service under the Swiss surveillance framework, but the heaviest duties, including six-month metadata retention, currently attach only where high turnover, business composition and subscriber thresholds are all met together. The pending VÜPF revision would redraw those lines. It has not been adopted, is undergoing a regulatory impact assessment, and a second consultation is planned.

Do dedicated servers in Switzerland require KYC?

Not with us. Email and password at signup, no identity documents at any point, on any product. Bitcoin and Monero accepted through our self-hosted BTCPay Server.

Should I get a dedicated server or a VPS?

If your reason is privacy rather than performance, the question is whether hypervisor-level exposure matters to your threat model. If it does, dedicated is the answer. If it does not, a Swiss VPS gives you the same jurisdiction for a fraction of the cost.

Getting started

All seven dedicated servers in Switzerland come with full root access, dedicated IPv4, a /64 IPv6 allocation, DDoS protection and a choice of operating systems. Specifications and ordering are on the Switzerland dedicated server page. If you are unsure whether you want cores or clock speed, contact us first and describe the workload. It is a cheaper conversation than a month on the wrong box.