Private cloud Data sovereignty for SMEs
In response to US tariffs, the EU is also considering levies on digital services from US companies such as Amazon and Google. This shows once again that political tensions can have a direct impact on digital infrastructures. For Swiss SMEs, this makes it clear how vulnerable global public cloud models are - both legally and operationally. At the same time, cyberattacks are increasing, data protection laws are becoming stricter and compliance risks are growing.
L'UE envisage actuellement des contre-mesures économiques contre les droits de douane spéciaux américains - dont des taxes sur les services numériques d'entreprises américaines telles que Google, Amazon ou la plateforme X. Ces développements montrent que les conditions géopolitiques ont une influence croissante sur les infrastructures numériques - un aspect que les entreprises suisses devraient prendre en compte dans leur stratégie de cloud.
Outre les questions géopolitiques, des défis opérationnels se posent également - par exemple dans le domaine de la sécurité informatique, de la conformité et de la dépendance vis-à-vis des grands fournisseurs. Une stratégie cloud prévoyante permet d'aborder ces aspects de manière ciblée.
- Les cyberattaques gagnent du terrain : selon la cyberétude 2024 réalisée par gfs-zürich pour le compte du Centre national de cybersécurité (NCSC), 4 % des PME suisses interrogées ont été victimes d'une cyberattaque grave au cours des trois dernières années - soit environ 24 000 entreprises en extrapolant. Plus critique encore : 40 % ne disposent pas d'un plan d'urgence ou d'une stratégie de continuité des activités en cas d'urgence.
- Dépendance vis-à-vis des géants de la technologie : Les fournisseurs mondiaux comme Microsoft Azure, AWS ou Google Cloud dominent le marché - et dictent souvent les conditions. Les PME suisses perdent ainsi de plus en plus le contrôle de leur infrastructure de données.
- Des zones d'ombre juridiques : La Cour de justice de l'Union européenne a déjà annulé le « Privacy Shield » en 2020. Les successeurs comme le « EU-US Data Privacy Framework » sont également critiqués - notamment en raison des possibilités d'accès par les autorités américaines selon le CLOUD Act. Pour les entreprises suisses, la situation en matière de conformité reste incertaine.
- Données en dehors de la Suisse : celui qui transfère des données à l'étranger risque d'être confronté à des juridictions étrangères. Pour les secteurs réglementés comme la finance, la santé ou l'industrie, c'est un risque à prendre au sérieux.
Tous ces facteurs conduisent à une question centrale : comment les PME suisses peuvent-elles réagir concrètement à ces défis ?
PRIVATE CLOUD - A SOVEREIGN PATH FOR SWISS SMES
While global public cloud providers often struggle with legal and security uncertainties, a Swiss private cloud like MTF's offers a trustworthy alternative - especially for companies that rely on data protection, control and stability.
Four key advantages at a glance:
- Swiss data locations: Your data is guaranteed to remain in certified data centres within Switzerland - DSG and GDPR compliant.
- Full control and security: Own governance rules, dedicated resources and the highest security standards such as ISO 27001.
- Legal certainty without grey areas: No extraterritorial access rights due to CLOUD Act & Co. - you decide who gets access.
- Customisable: Whether you are an SME with just a few users or a complex IT structure, private cloud solutions can be flexibly tailored to your needs.
The private cloud can be a strategic success factor for many SMEs - especially when data protection and control are the focus.
DATA SOVEREIGNTY AS A STRATEGIC COMPETITIVE ADVANTAGE
Data sovereignty means that your company retains full control over all business data - technically, legally and operationally. In our globalised IT world, in which US laws such as the CLOUD Act enable access to cloud data outside the USA, this principle is increasingly becoming a competitive advantage.
This is particularly relevant for Swiss SMEs: Anyone processing sensitive customer data must ensure that all data protection requirements of the FADP (Swiss Data Protection Act) and the GDPR are complied with - without any legal grey areas.
Authorities and business warn
- The Federal Data Protection and Information Commissioner (FDPIC) clearly recommends not using foreign cloud solutions for sensitive data if access by third parties cannot be reliably ruled out.
- The Swiss business association economiesuisse also warns that Swiss companies must actively consider the risks of international providers when choosing their cloud strategy - particularly with regard to compliance and sovereignty.
- Surveys show: For Swiss companies, trust in the IT infrastructure is crucial for the customer relationship - and cloud sovereignty is a key factor.
Customer trust is crucial
Data sovereignty is not just a legal or technical issue - it is a promise of trust to your customers. Companies that can clearly demonstrate where their data is stored and how it is protected create transparency, strengthen their brand and secure competitive advantages.
SECURITY AND SOVEREIGNTY START WITH THE RIGHT CLOUD STRATEGY
The decision in favour of or against a cloud solution is no longer a purely technical issue. It is strategic. Swiss SMEs are increasingly confronted with requirements that necessitate stable and transparent IT infrastructures: Increasing cyber risks, political tensions and growing compliance requirements demand an infrastructure that is not only powerful, but also legally and operationally stable. The combination of public and private cloud - i.e. a multi-cloud strategy - offers companies a flexible, secure and cost-efficient IT infrastructure.
- Independence: By using multiple providers, companies avoid dependence on a single cloud provider and gain more flexibility when selecting technologies and services.
- Costs: Public cloud services can be obtained at low cost, but their customisability to customer requirements is limited. With a combination of public and private cloud, you can combine the best of both worlds.
- Data protection & compliance: Sensitive data remains under full control in the private cloud and fulfils high data protection requirements (e.g. GDPR), while non-critical applications benefit from the innovations of the public cloud.
MTF: YOUR PARTNER FOR DATA PROTECTION-COMPLIANT CLOUD SERVICES
International providers can offer advantages - but for many Swiss SMEs, the benefits of a locally operated private cloud outweigh the disadvantages, particularly in terms of transparency, control and trust. Regardless of the industry: data sovereignty is becoming a success factor in a digitally networked but increasingly insecure world. With the private cloud, you lay the foundation for sustainable, trustworthy and legally compliant digitalisation of your company.
Would you like to take your cloud strategy to a new level - confident, secure and data protection-compliant? We would be happy to discuss with you how a private cloud strategy can meet your requirements. Our experts will analyse your existing infrastructure and show you the ideal path to a private cloud. With MTF, you can rely on an experienced Swiss partner who not only offers a secure cloud infrastructure, but also managed cloud services as a complete solution: from consulting and design to operation, monitoring and uninterrupted maintenance.
Your advantages with MTF at a glance:
- Single point of contact for infrastructure, services and support
- MTF operates its own cloud environment and, with its independent subsidiary ITNetX, has expertise in the public cloud sector
- MTF has an IT advisory team that can design and implement the perfect multi-cloud solution for you
FAQs
- What is a private cloud for SMEs?
A private cloud is a dedicated IT infrastructure operated exclusively for a company. Unlike public cloud services, where resources are shared with other users, the private cloud offers an isolated environment. This allows SMEs greater control over their data, improved security, and compliance with specific compliance requirements.
- Why is data sovereignty particularly important for Swiss SMEs?
Data sovereignty means that a company retains complete control over its data, including its storage, processing, and access. For Swiss SMEs, this is crucial to comply with legal requirements such as the Data Protection Act (DSG) and to secure the trust of their customers. Using a private cloud within Switzerland supports this control and minimizes risks associated with data transfers abroad.
- How does a private cloud differ from public cloud solutions in terms of data sovereignty?
With public cloud providers, you share resources with other companies, and the location of the data is often not fully transparent or controllable. This can lead to challenges with regard to data sovereignty and compliance with local laws. A private cloud, on the other hand, offers a dedicated environment where you have full control over the data location. - How does MTF Solutions support SMEs in implementing a private cloud?
MTF Solutions offers comprehensive services for SMEs that want to introduce a private cloud. This includes consulting, planning, implementation, and operation of the cloud infrastructure. Through customized solutions, MTF ensures that the specific needs and requirements of each company are taken into account. - Can I integrate my existing applications into the MTF Private Cloud?
Yes, MTF Solutions offers comprehensive support in migrating and integrating existing applications into the private cloud. This includes both standard applications and industry-specific software solutions. - How flexible is MTF Solutions' multi-cloud strategy?
MTF Solutions' multi-cloud strategy enables companies to combine different cloud services – be they private, public, or hybrid clouds. This offers maximum flexibility and scalability, avoiding dependence on a single provider. - Is a private cloud scalable for growing SMEs?
Yes, a private cloud is scalable and can be adapted to a company's growth. Resources such as storage space, computing power, and network bandwidth can be expanded as needed without impacting the existing infrastructure.
- How quickly can a private cloud be implemented?
The implementation time for a private cloud varies depending on the complexity and specific requirements of the company. However, MTF Solutions strives to carry out efficient and timely implementations to minimize disruption to business operations.
Also interesting
Do you have Questions ?
Rubén Saiz
Managing Director Liechtenstein, St. Gallen & Chur