Type "swiss email hosting" into a search engine and you get two very different products mixed together: privacy mailboxes with a Swiss flag on the landing page, and boring, classic mail hosting for your own domain that happens to sit in a Swiss data center. Both are legitimate. They solve different problems, and the Swiss part means something specific in each case. Here is how to tell them apart and what the location actually changes.
Two products hide behind one search
A private mailbox service gives you an address on the provider's infrastructure, usually with strong encryption and privacy features built in. You use their apps or webmail, and you can often bring your own domain on paid plans. If this is what you are after, we compared the Swiss options in detail in our guide to private email in Switzerland.
Email hosting for your domain is the classic product: you own yourcompany.ch or any other domain, and the host runs the mail servers behind it. You get standard IMAP and SMTP, mailboxes for your team, and you connect any mail client you like. The privacy features are thinner, but everything speaks standard protocols and nothing locks you in.
The distinction matters because the guarantees are different. A zero-access mailbox protects content even from the provider. Classic hosting protects your mail with transport encryption and encryption at rest, but the provider can technically read what sits in the mailbox. Swiss jurisdiction applies to both; what the provider can be forced to hand over differs enormously.
What Swiss jurisdiction actually changes
Three things are concrete rather than marketing:
The applicable law is the revised FADP. Switzerland's Federal Act on Data Protection was overhauled in September 2023. It is broadly aligned with the GDPR (the EU recognises Swiss protection as adequate), but it is enforced by Swiss authorities, in Switzerland.
No default reach for the US CLOUD Act. A provider incorporated in Switzerland with no US establishment is not directly subject to US orders compelling data disclosure. With a US provider, that reach applies even when the data center is in Europe. This is the single strongest technical-legal argument for Swiss hosting.
Swiss courts still exist. A Swiss provider must comply with valid Swiss legal orders, and Switzerland cooperates with other states through legal assistance procedures. The most cited example is public: in 2021, Proton confirmed it had been required by Swiss authorities to log the IP address of one specific account under investigation. Swiss hosting narrows who can compel your provider. It does not create a legal void.
The providers that actually host in Switzerland
Three names come up constantly, and they map neatly onto the two products above.
Proton Mail (Geneva) is the privacy mailbox. Message storage is zero-access encrypted, meaning Proton cannot read stored mail, and mail between Proton users is end-to-end encrypted. Custom domains are supported on paid plans, so it can replace classic hosting for a small team, with the caveat that you access mail through Proton's apps and its IMAP bridge rather than plain IMAP.
Infomaniak (Geneva) is the classic host. It runs its own data centers in Switzerland, offers mail hosting for your domain with standard IMAP and SMTP, and bundles it into a broader office suite if you want calendars and drive storage. This is jurisdiction plus solid engineering, not end-to-end encryption.
Hostpoint (Rapperswil) is Switzerland's largest web hoster and plays the same role: domains, websites, and standard mailboxes under one roof, hosted in Switzerland.
The honest summary: pick Proton when the threat model includes the provider itself being compelled or curious. Pick Infomaniak or Hostpoint when you want your own domain on Swiss soil with standard protocols, working calendars, and no bridge software.
Filtering is part of the product
A mailbox you actually use every day lives or dies by its filtering, because the mail that matters shares an inbox with everything trying to trick you.
The message in the photo above is the standard phishing shape: an alarming claim about your credit card and one big button. Any host you choose runs spam and phishing filters in front of your inbox, and quality varies. When you evaluate a provider during a trial period, forward it some of the junk from your old mailbox and see what gets through. A Swiss IP address does nothing against a convincing fake; the filter does.
Setting it up on your own domain
Whichever host you choose, connecting a domain comes down to four DNS records:
- MX records point your domain's incoming mail to the host's servers. The host gives you the exact values.
- SPF lists the servers allowed to send mail for your domain, in one TXT record.
- DKIM adds a cryptographic signature to outgoing mail; the host publishes the key material for you to paste into DNS.
- DMARC tells receiving servers what to do when SPF or DKIM fail, and where to send reports.
Skip the last three and your legitimate mail starts landing in spam folders, because large receivers increasingly refuse unauthenticated mail. Every serious Swiss host documents these records and most check them automatically from the control panel.
Migration from an old mailbox is unglamorous but standard: both Proton and Infomaniak offer IMAP import tools that copy folders from your previous provider over an encrypted connection.
What the Swiss flag does not protect
Honesty requires this section. Swiss hosting does not change three things:
The other endpoint. Mail you exchange with someone on a mainstream provider exists in that provider's infrastructure too, under that provider's jurisdiction. Your copy is in Switzerland; theirs is not.
Metadata. Sender, recipient, timestamps and subject lines are needed to route mail and are visible to any provider at some layer, zero-access storage or not.
You. A phished password or a compromised device gives an attacker your mailbox regardless of which country the servers are in.
Summary
Swiss email hosting is a real category with a real legal difference: the revised FADP applies, and the US CLOUD Act does not reach a purely Swiss provider by default. Decide first which product you need. A zero-access mailbox such as Proton Mail protects content even from the provider and accepts custom domains on paid plans. Classic hosting from Infomaniak or Hostpoint puts your own domain on Swiss infrastructure with standard protocols. Then set up SPF, DKIM and DMARC properly, and remember what jurisdiction cannot do: it does not encrypt anything by itself, and it does not filter the phishing email pretending to be your bank.
Private, encrypted email → Proton Mail
End-to-end encrypted · Swiss jurisdiction · open-source · free tier
