The revised Swiss Federal Act on Data Protection (revDSG, in force since 2023) treats hosting providers as data controllers only for customer billing data, not for traffic content. For an onion VPS this means the legal disclosure scope is the BTC/XMR payment record plus the SSH login pattern. We hold no traffic content and we ship VPS with logging disabled.
Switzerland is not in the EU and not bound by EU mutual-legal-assistance shortcuts. A foreign disclosure request goes through the Federal Office of Justice and requires dual criminality plus a Swiss court order. This filter eliminates the vast majority of speculative onion-service complaints.