# Kubernetes Competence Center Switzerland

> Switzerland's first KCSP. VSHN provides Kubernetes consulting, architecture design, and managed operations on any cloud provider. 24/7 expert support.


Your Kubernetes Competence Center Switzerland – VSHN is Switzerland's first Kubernetes Certified Service Provider (KCSP). We help you design, build, and operate production Kubernetes platforms on any cloud provider, private cloud, or on-premises infrastructure – with 24/7 support, an SLA up to 99.99%, and a fixed monthly fee.


## Pages

- [Homepage](https://www.kubernetes-experten.ch/): Kubernetes Experts in Switzerland – Consulting | VSHN
- [Kubernetes Platforms Compared: Hyperscaler vs Sovereign vs On-Prem | VSHN](https://www.kubernetes-experten.ch/comparison.md)
- [Partner with VSHN on Kubernetes | VSHN](https://www.kubernetes-experten.ch/partners.md)
- [Kubernetes Sovereignty — Swiss K8s Hosting | VSHN](https://www.kubernetes-experten.ch/sovereignty.md)

## Features

- **Kubernetes Expertise from Switzerland**: VSHN is Switzerland's first Kubernetes Certified Service Provider (KCSP) and has been running Kubernetes in production since 2016 backing APPUiO. From initial architecture through day-two operations, our engineers know the patterns, best practices, and pitfalls that save you months of effort when building container platforms.

- **Architecture & Implementation**: We design Kubernetes architectures tailored to your organization's size, compliance requirements, and infrastructure landscape. Whether you need a managed cluster on a Swiss cloud provider, a multi-cluster setup across regions, or an on-premises deployment, VSHN handles the design, deployment, and configuration – all for a fixed monthly fee.

- **Multi-Cloud, Private Cloud & On-Premises**: VSHN deploys Kubernetes on Swiss cloud providers such as cloudscale.ch and Exoscale, on international platforms like AWS, Google Cloud, and Microsoft Azure, or on your own private cloud and on-premises infrastructure. We ensure your container platform meets Swiss data residency and compliance requirements from the ground up. Learn more in our [sovereignty assessment](/sovereignty/).

- **Application Operations on Kubernetes**: VSHN does not just build your platform – we help you run workloads on it. From custom application operations support for your own software to a marketplace of managed services like PostgreSQL, MariaDB, Redis, Keycloak, and more via the VSHN Application Catalog and Servala, we cover the full stack from infrastructure to application.

- **CNCF Graduated Project**: Kubernetes is a Cloud Native Computing Foundation graduated project backed by a vibrant open-source community. No license surprises, no vendor lock-in on the orchestration layer. VSHN actively contributes to the open-source ecosystem and helps you benefit from the full cloud-native landscape.

- **Consulting, Training & Support**: From architecture reviews and proof-of-concept builds to training delivered by specialist partners and ongoing 24/7 operational support – VSHN offers the full spectrum of Kubernetes services. We help your team become self-sufficient or provide long-term operational partnership, whichever fits your needs.


## What VSHN offers for Kubernetes

- Architecture design and review for Kubernetes platforms
- Cluster provisioning on any cloud, private cloud, or on-premises infrastructure
- 24/7 operations and support with an SLA up to 99.99%
- Internal developer platform design and implementation
- Custom application operations support for your workloads
- Managed services from the VSHN Application Catalog (databases, caches, identity)
- Training delivered by specialist partners for platform and development teams
- Swiss-based consulting with transparent engagement terms

## Trusted by Swiss organizations

- [Finnova](https://www.vshn.ch/en/success-stories/finnova/)
- [acrevis](https://www.vshn.ch/en/success-stories/acrevis/)
- [Komed Health](https://www.vshn.ch/en/success-stories/komed-health/)
- [HIN](https://www.vshn.ch/en/success-stories/hin-health-info-net/)
- [Taurus](https://www.vshn.ch/en/success-stories/taurus/)

## Testimonials

> Everything technical works perfectly at VSHN. The support is extremely good. I can recommend them to anyone, especially for professional Kubernetes cluster operation.

> — Marc Bornträger, VP Engineering & Founder, Komed Health

## Kubernetes FAQ

### What Kubernetes services does VSHN offer?

VSHN offers fully managed Kubernetes operations, consulting, architecture design, implementation, training, and support. We take care of the platform operations for a fixed monthly fee with 24/7 support and an SLA up to 99.99%. Whether you are evaluating Kubernetes for the first time or running it in production on cloudscale.ch, Exoscale, AWS, Google Cloud, or Microsoft Azure, we bring hands-on experience to accelerate your project.


### Which Kubernetes distributions does VSHN support?

VSHN supports multiple Kubernetes distributions including Red Hat OpenShift Container Platform, Red Hat OpenShift Kubernetes Engine, and upstream Kubernetes. OpenShift adds enterprise developer tooling, built-in CI/CD pipelines, and a comprehensive operator ecosystem on top of Kubernetes. VSHN is a Red Hat Premier Certified Cloud & Service Provider (CCSP) and helps you choose the right distribution for your requirements – whether you need a full enterprise platform or a leaner open-source deployment.


### Why is VSHN the right Kubernetes partner in Switzerland?

VSHN is Switzerland's first Kubernetes Certified Service Provider (KCSP) and has been running Kubernetes in production since 2016 backing APPUiO. We have operated clusters for customers across Switzerland and Europe on cloudscale.ch, Exoscale, AWS, Google Cloud, and Microsoft Azure. This depth of experience means we know which patterns work at scale, how to structure clusters for maintainability, and how to avoid common pitfalls.


### Which cloud providers does VSHN support for Kubernetes?

VSHN deploys Kubernetes on Swiss cloud providers including cloudscale.ch and Exoscale, both of which operate data centers exclusively in Switzerland. We also support AWS, Google Cloud, Microsoft Azure, and private cloud or on-premises environments. Swiss cloud providers are the recommended choice for organizations with data residency or compliance requirements. Your infrastructure preferences are documented in the engagement scope before any work begins.


### Can VSHN help run applications on Kubernetes?

Yes. Beyond building and operating the platform itself, VSHN offers custom application operations support for your own software – including deployment automation, monitoring, and incident response. We also provide a marketplace of managed standard software through the VSHN Application Catalog and Servala, including PostgreSQL, MariaDB, Redis, Keycloak, MinIO, Kafka, and more. This means you can run both custom and off-the-shelf workloads on Kubernetes with full operational backing.


### How are backups handled on Kubernetes clusters?

VSHN uses K8up, an open-source Kubernetes backup operator, for application data protection. K8up performs automated encrypted backups of persistent volumes and application state to off-site storage. We help you design a backup strategy that covers retention policies, disaster recovery procedures, and compliance requirements. etcd backups protect against cluster-level data corruption and are configured as part of every deployment.


### Does VSHN offer Kubernetes training?

Yes. VSHN works with specialist training partners to deliver hands-on Kubernetes training for platform engineers and development teams. Training covers Kubernetes architecture, cluster operations, GitOps workflows, Helm chart development, security hardening, and day-two operations. Sessions can be delivered on-site in Switzerland or remotely, tailored to your team's experience level and your specific infrastructure.


### How do I engage VSHN for Kubernetes consulting?

Contact us using the form below. Describe your project – whether it is an architecture review, a proof of concept, a production deployment, or ongoing operations. We provide a written scope and CHF cost estimate within one business day. There is no commitment at the scoping stage. Engagements typically start within one to two weeks of agreement.


### Can consulting firms engage VSHN for Kubernetes in client projects?

Yes. Consulting firms and system integrators regularly engage VSHN to provide Kubernetes expertise for their client projects. VSHN can operate the cluster while your team handles application architecture, or we can run a joint engagement covering platform design through day-two operations. As Switzerland's first CNCF Kubernetes Certified Service Provider, VSHN brings deep platform knowledge and 24/7 operational support to complement your consulting practice.


## Contact us

Planning a Kubernetes platform? Contact us for a free initial consultation and architecture review. Want to hear from a customer first? We can arrange a reference call.


Booking: #contact

---

## Kubernetes Platforms Compared: Hyperscaler vs Sovereign vs On-Prem | VSHN

# Kubernetes Platforms Compared: Which One Fits Your Organisation?

Choosing a Kubernetes platform means deciding how much you manage yourself, where your data lives, and what trade-offs you accept on sovereignty and lock-in. This comparison groups the options into four categories relevant to Swiss organizations.

VSHN is a Kubernetes Competence Center. We consult on and operate any of these platforms and offer sovereign and on-premises alternatives.

## Quick comparison

| | Self-Managed | Hyperscaler Kubernetes | Sovereign Kubernetes | Managed Kubernetes On-Prem / Private Cloud |
|---|---|---|---|---|
| **Examples** | Any distribution on your infra | Google GKE, AWS EKS, Azure AKS | Exoscale SKS, APPUiO, Managed OpenShift on cloud | Managed OpenShift on-prem |
| **Data location** | Your choice | Provider regions (incl. Switzerland) | Switzerland / sovereign region of your choice | Your data center |
| **Company jurisdiction** | Yours | US (CLOUD Act applies) | Swiss (Akenes SA, VSHN AG) | Yours |
| **Control plane** | You manage | Provider manages | Provider or VSHN manages | VSHN manages |
| **Worker nodes** | You manage | You manage | VSHN manages (APPUiO, OpenShift) or you manage (SKS) | VSHN manages |
| **Upgrades** | Your responsibility | Partial (control plane only) | VSHN manages (APPUiO, OpenShift) or your responsibility (SKS) | VSHN manages |
| **Monitoring & alerting** | Your responsibility | Partial (provider tools) | Included: Prometheus, Grafana (APPUiO, OpenShift) | Included: Prometheus, Grafana |
| **Managed backups** | Your responsibility | Not included (available with VSHN management) | Not included (available with VSHN management) | **Included** |
| **SLA** | None | 99.95% (control plane only) | Up to 99.99% (Managed OpenShift) | Up to 99.99% |
| **Vendor lock-in** | None | High (provider-specific APIs, networking, IAM) | Low (standard K8s / OpenShift APIs) | Low (standard K8s / OpenShift APIs) |
| **Best for** | Large platform teams (5+ engineers) | Teams invested in a hyperscaler with a platform team, or VSHN-managed | Swiss jurisdiction + managed operations | On-prem requirements or regulatory constraints |

<p style="text-align:center;margin:2rem 0"><a href="#contact" class="btn">Questions? Contact us</a></p>

## Hyperscaler Kubernetes

Google GKE, AWS EKS, and Azure AKS manage the Kubernetes control plane on their global cloud infrastructure. You manage worker nodes, deployments, and day-2 operations.

**Strengths:**

- Managed control plane (etcd, API server, scheduler)
- Tight integration with each provider's ecosystem (monitoring, IAM, networking, storage)
- Switzerland regions available on all three providers
- Auto-upgrades for control plane versions (GKE, AKS)
- Large ecosystem, marketplace, and community

**Limitations:**

- You still need a platform team for worker node operations, upgrades, and patching
- **US jurisdiction.** All three are subject to the CLOUD Act. US authorities can compel data access regardless of data center location.
- Provider-specific features (GKE Config Connector, EKS IAM, Azure AD) create lock-in
- No backup solution included. Your platform team must build and maintain backups.
- Monitoring covers infrastructure metrics but not application-level observability

**Best for:** Organisations invested in a hyperscaler that have a platform team. VSHN can also manage hyperscaler Kubernetes for teams without strict data sovereignty requirements.

## Sovereign Kubernetes

Sovereign Kubernetes platforms run on Swiss cloud infrastructure with no CLOUD Act exposure. VSHN operates on these platforms and can add managed backups, monitoring, and 24/7 operations.

### Exoscale SKS (Simple Kubernetes Service)

Exoscale is a Swiss cloud provider (Akenes SA, Lausanne). SKS provides a managed Kubernetes control plane on Swiss and European infrastructure.

- **Swiss company, Swiss jurisdiction.** No CLOUD Act exposure.
- Managed control plane with automatic upgrades
- Standard Kubernetes APIs, no proprietary extensions, minimal lock-in
- Swiss data centers (Geneva, Zurich) and European regions
- Simple, predictable pricing
- VSHN operates production workloads on Exoscale SKS
- You bring your own monitoring, backup, and platform team for worker nodes and in-cluster operations. VSHN can also manage this for you.
- [Sign up for Exoscale]({{partner:exoscale.signup_url}}) to try SKS, or start with [APPUiO](https://www.appuio.ch) for fully managed Kubernetes. Want help choosing? [Contact us](#contact).

### APPUiO: Sovereign Kubernetes Namespace as a Service

[APPUiO](https://www.appuio.ch) is a shared sovereign Kubernetes platform built on Red Hat OpenShift, hosted in Swiss data centers. You get a namespace and deploy. VSHN handles everything else.

- **Instant provisioning.** Namespace ready in seconds, self-service via portal.
- **Pay-per-use.** Billed per minute, per MiB of RAM. No minimum commitment.
- **Swiss hosted.** cloudscale.ch (Lupfig AG) and Exoscale (Geneva GE).
- **Managed backups included.** Automatic backups via K8up, no extra cost or configuration.
- **Full observability included.** Monitoring (Prometheus), logging (Loki), dashboards (Grafana).
- **ISO 27001** certified operations, FINMA-compatible.
- **No platform team needed.** Application operations remain your responsibility. VSHN can manage them for you too.
- Best for teams that want to deploy containers without managing infrastructure.

### Managed OpenShift on Cloud: Dedicated Sovereign Kubernetes

[Managed OpenShift](https://www.managed-openshift.ch) is a dedicated Red Hat OpenShift cluster operated by VSHN on Swiss cloud providers.

- **Full-stack operations.** Control plane, worker nodes, networking, storage, monitoring, backups.
- **Managed backups included.** Automated cluster and application backups, tested regularly.
- **Swiss cloud providers.** cloudscale.ch, Exoscale, or other Swiss/European providers.
- **Up to 99.99% SLA** with service credits.
- **VSHN Application Catalog.** Managed PostgreSQL, MariaDB, Redis, Keycloak on the same cluster.
- **Red Hat Premier CCSP Partner.** VSHN has operated OpenShift in production since 2016.
- 24/7 monitoring with incident response. ISO 27001 certified operations.
- **No platform team needed.** Application operations remain your responsibility. VSHN can manage them for you too.
- Best for enterprises that need a fully managed, sovereign Kubernetes platform with enterprise support.

## Managed Kubernetes On-Prem / Private Cloud

For organizations that must run Kubernetes on their own infrastructure, whether for regulatory reasons, latency requirements, or existing data center investments, VSHN operates dedicated OpenShift or Kubernetes clusters on-premises or in private cloud environments.

- **Your hardware, our operations.** VSHN manages the full Kubernetes stack on your infrastructure.
- **Managed backups included.** Automated backups with off-site replication where required.
- **Full observability included.** Prometheus, Grafana, and alerting, same as our cloud platforms.
- **Up to 99.99% SLA** with service credits.
- **VSHN Application Catalog.** Managed databases and services, same as on cloud.
- **Hybrid cloud ready.** Combine on-prem clusters with cloud-based clusters, managed under a single SLA.
- **Red Hat OpenShift** or upstream Kubernetes distributions.
- Best for enterprises with on-prem mandates, air-gapped environments, or hybrid cloud strategies.

## How VSHN helps on any platform

VSHN is a Kubernetes Competence Center, not just a managed service provider. We work with your team on whichever platform you choose:

- **Architecture consulting.** Evaluate hyperscaler, sovereign, or on-prem Kubernetes for your requirements. We help you choose, not sell you one option.
- **Operations support.** VSHN can operate or co-operate your clusters on any platform.
- **Migration.** Move workloads between platforms (e.g. from self-managed to sovereign, from EKS to OpenShift).
- **Training.** Kubernetes and container training for your team, delivered with training partners.
- **Application Catalog.** Managed databases and services that run on any Kubernetes platform.
- **CNCF Kubernetes Certified Service Provider.** Switzerland's first.

## The control plane is the easy part

Hyperscaler Kubernetes manages the **control plane**. The operational burden is in worker nodes, upgrades, networking, storage, monitoring, backup, and incident response. These remain your responsibility. No hyperscaler includes backups. You must build and maintain your own backup strategy.

With VSHN management, you get managed backups, monitoring, and full-stack operations on any platform: sovereign cloud, on-prem, or hyperscaler.

## When to work with VSHN

- You need help choosing the right Kubernetes platform
- Your data must stay under Swiss jurisdiction, not just in a Swiss data center operated by a US company
- Your platform team is too small for 24/7 Kubernetes operations
- You want a fully managed sovereign platform (APPUiO or Managed OpenShift)
- You need Kubernetes on-premises or in a private cloud, fully operated
- You run on a hyperscaler but need Swiss operations, security, or compliance support
- You are migrating between platforms and need an experienced partner

For a detailed sovereignty analysis, see our [Kubernetes sovereignty assessment](/sovereignty/).

<div class="prose-cta">
<h2>Find the right Kubernetes approach</h2>
<p>Free architecture review: we assess your setup and recommend the right platform.</p>
<a href="#contact" class="btn">Book a free review</a>
</div>

## Next steps

Ready to discuss your Kubernetes setup? [Book a free architecture review](#contact) with our team. We assess your current environment and recommend the right approach, whether that is consulting on your existing platform, sovereign Kubernetes, or managed on-prem.


---

## Partner with VSHN on Kubernetes | VSHN

# Partner with VSHN on Kubernetes

You bring the customer relationship and cloud-native expertise: Kubernetes consulting, application modernisation, container migration, developer training. VSHN brings Kubernetes cluster operations, monitoring, upgrades, SLA, 24/7 support, and incident response. Together you deliver a complete Kubernetes solution without either side building capabilities you don't have.

## How we collaborate

**Lead Partner model.** For each project, one of us is the customer's single point of contact. Who leads depends on the project, agreed per engagement. The Lead Partner drives the project, handles invoicing, and owns first-level support.

**Joint delivery.** You handle consulting, integration, and project management. VSHN handles infrastructure operations, monitoring, backups, and SLA. Or the other way around, depending on the project. Roles are agreed per engagement, not locked into a rigid structure.

**Flexible billing.** Invoice the customer together or separately, agreed per project. Both models are supported: each party invoices their share directly, or one party invoices the full amount and redistributes.

**Protected relationships.** No undercutting. Your customer stays your customer. Existing relationships are respected on both sides, with contractual protections for both parties.

## Division of labour for Kubernetes

| Your role | VSHN's role |
|-----------|-------------|
| Kubernetes consulting | Kubernetes cluster operations |
| Application modernisation | Monitoring, alerting, and incident response |
| Container migration | Upgrades and security patches |
| Developer training | SLA and 24/7 support |
| Project management and customer relationship | |

## Partners delivering Kubernetes

**[tim&koko](https://tim-koko.ch)**. Cloud consulting firm. Delivers Kubernetes consulting and application modernisation on VSHN-operated cluster infrastructure.

**[bespinian](https://bespinian.io)**. Cloud-native consulting firm. Provides container migration and developer training alongside VSHN managed Kubernetes.

**[Puzzle](https://puzzle.ch)**. Software company with 140+ employees. Delivers Kubernetes consulting and DevOps transformation alongside VSHN managed operations.

See all VSHN partners at [servala.com/partners](https://servala.com/partners/).

## Become a partner

Interested in delivering Kubernetes solutions together? Let's explore how we complement each other.

[Book a partnership discovery call](https://aarno.cal.vs.hn/15-kubernetes) or [start a partnership conversation](#contact).


---

## Kubernetes Sovereignty — Swiss K8s Hosting | VSHN

# Kubernetes Sovereignty: No Vendor, No Foreign Dependency

Your Kubernetes cluster runs every containerized workload, stores every secret, and orchestrates every deployment. The sovereignty of your platform determines the sovereignty of everything running on it.

Hyperscaler Kubernetes services (GKE, EKS, AKS) bundle the open-source Kubernetes core with proprietary control planes, identity systems, and networking layers, all operated by US companies under US law. Even "Swiss region" deployments are subject to the [CLOUD Act](https://en.wikipedia.org/wiki/CLOUD_Act), meaning a US court can compel access to your cluster data without Swiss judicial process. Managed OpenShift adds Red Hat (IBM subsidiary, US) as an additional dependency in the corporate chain.

Vanilla Kubernetes is the CNCF-governed open-source project: no corporate owner, no proprietary extensions, and no license restrictions. VSHN operates managed Kubernetes on Swiss infrastructure with zero non-Swiss vendor dependencies.

## Why vanilla Kubernetes maximizes sovereignty

Compared to any managed Kubernetes offering from a hyperscaler or vendor distribution, vanilla Kubernetes eliminates every foreign dependency:

- **No corporate owner**: governed by the CNCF (Linux Foundation), not a single company
- **No proprietary control plane**: the entire stack is open source and auditable
- **No vendor subscription**: unlike OpenShift (Red Hat/IBM), no commercial license or certified image registry required
- **No platform lock-in**: standard Kubernetes APIs, portable to any infrastructure
- **No foreign dependency**: VSHN builds and operates the platform with no US corporate chain at any layer

This is the key difference from managed OpenShift: with vanilla Kubernetes, there is no Red Hat subscription, no IBM corporate parent, no foreign entity providing certified images or update channels. The dependency chain is entirely Swiss.

## Managed Kubernetes sovereignty compared

| Dimension | GKE (Google) | EKS (Amazon) | AKS (Microsoft) | OpenShift (Red Hat/IBM) | VSHN Managed Kubernetes |
|-----------|-------------|-------------|-----------------|----------------------|------------------------|
| **Platform owner** | Google (USA) | Amazon (USA) | Microsoft (USA) | Red Hat/IBM (USA) | CNCF (open governance) |
| **Operator** | Google (USA) | Amazon (USA) | Microsoft (USA) | Varies | VSHN AG (Switzerland) |
| **Governing law** | US law | US law | US law | US law | Swiss law |
| **CLOUD Act** | Exposed | Exposed | Exposed | Exposed (Red Hat) | Not exposed |
| **Data location** | Configurable | Configurable | Configurable | Configurable | Switzerland by default |
| **Vendor dependency** | Google APIs, IAM | AWS APIs, IAM | Azure APIs, AD | Red Hat subscription | None — CNCF-governed |
| **Platform source** | Proprietary (K8s core open) | Proprietary (K8s core open) | Proprietary (K8s core open) | Open source (OKD) | Fully open source (vanilla K8s) |
| **Operations team** | USA | USA | USA | USA (Red Hat support) | Switzerland ([Swiss-only option](https://products.vshn.ch/support_plans.html#_option_switzerland_only_support)) |

## The zero-dependency argument

Every managed Kubernetes offering except vanilla K8s introduces at least one foreign dependency:

- **GKE**: requires Google Cloud account, Google-specific node pools, Google IAM
- **EKS**: requires AWS account, AWS-specific networking (VPC CNI), AWS IAM
- **AKS**: requires Azure account, Azure-specific networking, Azure AD integration
- **Managed OpenShift**: requires Red Hat subscription, Red Hat-certified images, Red Hat update channels

With VSHN Managed Kubernetes, the dependency chain is:

1. **Kubernetes**: CNCF-governed, open source (Apache 2.0)
2. **Infrastructure**: Swiss providers ([cloudscale.ch](https://www.cloudscale.ch), [Exoscale](https://www.exoscale.com)) or customer-owned
3. **Operations**: VSHN AG (Swiss-owned, Swiss-operated)
4. **Application services**: [VSHN Application Catalog](https://products.vshn.ch/appcat/services_index.html), all open source, all on the same sovereign stack

No foreign corporation appears anywhere in this chain. This is what maximum Kubernetes sovereignty looks like.

## VSHN sovereignty self-assessment

We applied the EU's [Cloud Sovereignty Framework](https://commission.europa.eu/document/09579818-64a6-4dd5-9577-446ab6219113_en) (v1.2.1, October 2025) to our own services. This framework was used to score providers in the EU's [EUR 180M sovereign cloud tender](https://ec.europa.eu/commission/presscorner/detail/en/ip_26_833) in April 2026. Three pure-European providers achieved SEAL-3, while a consortium involving Google Cloud scored only SEAL-2.

*This is a self-assessment, not a formal SEAL certification. We publish it for transparency so customers can evaluate our sovereignty profile using the same structured criteria the EU uses.*

| # | Dimension | Weight | Assessment | Evidence |
|---|-----------|--------|-----------|----------|
| SOV-1 | Strategic | 15% | **Strong** | Swiss AG, no foreign parent, all shareholders Swiss citizens ([Commercial Register](https://zh.chregister.ch/cr-portal/auszug/auszug.xhtml?uid=CHE-275.566.226)) |
| SOV-2 | Legal | 10% | **Strong** | Swiss law ([GTC](https://products.vshn.ch/legal/gtc_en.html)), no CLOUD Act, [EU adequacy decision](https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en) |
| SOV-3 | Data & AI | 10% | **Strong** | Swiss DCs by default. Sovereign key management via [Managed OpenBao](https://www.openbao.ch) + [Swiss HSM](https://cloud.securosys.com/cloudhsm) |
| SOV-4 | Operational | 15% | **Strong** | Swiss 24/7 ops, [Swiss-only support option](https://products.vshn.ch/support_plans.html#_option_switzerland_only_support). All services on vanilla Kubernetes |
| SOV-5 | Supply Chain | 20% | **Strong** | Infrastructure-agnostic — [customer chooses provider](https://servala.com/providers/). Open-source software |
| SOV-6 | Technology | 15% | **Strong** | 100% open source. VSHN contributes to [K8up](https://github.com/k8up-io) (CNCF), [Crossplane providers](https://github.com/vshn), [Project Syn](https://github.com/projectsyn) |
| SOV-7 | Security | 10% | **Strong** | [ISO 27001](https://www.vshn.ch/wp-content/uploads/2025/12/ISO-27001-certificate-VSHN-2024.pdf), ISAE 3402 Type II, Swiss SOC. [FINMA-regulated customers](https://www.vshn.ch/en/solutions/solutions-for-banks-and-financial-service-providers/) |
| SOV-8 | Environmental | 5% | **Moderate** | DC operators: Green Datacenter AG (ISO 22301/27001/27701), [Exoscale sustainability](https://www.exoscale.com/sustainability/). [VSHN CSR policy](https://handbook.vshn.ch/corporate_social_responsibility_policy.html) |

**Overall: SEAL-3 equivalent**, the same level achieved by the winners of the EU's own sovereignty tender. No provider worldwide achieved SEAL-4: it requires fully EU/EEA-sourced hardware supply chains and open-source foundations, structural gaps shared by every cloud provider.

Try Swiss infrastructure: [APPUiO](https://www.appuio.ch) (managed Kubernetes, free trial), [Exoscale]({{partner:exoscale.signup_url}}) (Swiss IaaS). Want help choosing? [Contact us](#contact).

## Get a sovereignty assessment for your Kubernetes setup

Running Kubernetes on a hyperscaler and concerned about CLOUD Act exposure? We assess your sovereignty profile against the EU framework and plan a migration to vanilla Kubernetes on Swiss infrastructure with zero non-Swiss vendor dependencies.