"Hosted in the EU" covers a lot of ground — it can mean a US-owned hyperscaler's Frankfurt region just as easily as a small independent provider. QueueHawk's infrastructure, database, and application all run on servers physically located in Switzerland, operated by the same team that built the product. Here's why that distinction is worth making explicit.
The Swiss Federal Act on Data Protection (FADP, revised 2023) is broadly aligned with the GDPR but is a separate legal framework, administered independently of the EU. For an agency whose own clients care about where their data physically sits and under which law it's protected, "Switzerland" is a more specific and independently verifiable answer than "EU" as a category.
Infrastructure operated by a US-headquartered provider — even hosted in an EU data center — can, in some circumstances, be reachable by US legal process under the CLOUD Act, regardless of where the servers physically sit. Swiss-owned infrastructure operated by a Swiss company isn't subject to that exposure. This is a genuine, not just perceived, difference for organizations that specifically evaluate vendors on this point.
"Hosted in Switzerland" alone can still mean a foreign company merely renting a Swiss data center. QueueHawk is built by Substring AG, a Swiss company, and run on infrastructure that Swiss engineers operate directly — support requests, incident response, and infrastructure decisions all happen inside the same jurisdiction as the data itself.
It's not a substitute for reading the actual data QueueHawk collects — see the Privacy Policy for the specifics (job metadata, never payloads unless you opt in) — and it's not a claim that Swiss hosting alone makes a product secure. It's one factual, checkable data point among several: see also our full trust section covering tenant isolation and the push-only agent design.