For a growing list of European organizations, “the vendor is subject to US jurisdiction” ends the evaluation before it starts. Swytch is built by Swytch BV, a Dutch company. The data plane runs on your infrastructure, in your regions. The control plane is zero-knowledge. There is nothing to hand over, and no US parent company to compel.
# macOS / Linux (Homebrew)
brew tap swytchdb/tap
brew install swytchDocker: ghcr.io/swytchdb/swytch
The data plane — the nodes holding your keys and values — runs on your hardware, in your cloud accounts, in the regions you choose. It is AGPL open source; you can read every line it runs.
Swytch Cloud, the managed control plane, never sees your data. It is not on the data path. It gives your nodes the information to optimize their own configuration, and nothing else travels. The zero-knowledge property is held by the architecture, not by a policy document — there is nothing to disclose, even under compulsion.
# the paperwork
Company: Swytch BV
Registered: Utrecht, the Netherlands
KvK: 42061454
VAT: NL869530355B01
License: AGPL-3.0
Control plane: zero-knowledge, off the data pathThe facts a procurement review actually checks.
Not a compliance annex. Not a data processing addendum. The system is built so the question doesn’t arise.
Swytch BV is registered in Utrecht, the Netherlands, under Dutch and EU law. No US parent entity anywhere in the chain.
The data plane is self-hosted: your regions, your hardware, your network boundary. Nothing is replicated to a vendor, because there is no vendor on the data path.
AGPL-3.0, source on GitHub. The zero-knowledge claim is verifiable by reading the code — not by trusting the brochure.
The architecture answers most of their questions. The source code answers the rest. We’re happy to be in the room for whatever’s left.
Working through a procurement review? Drop your address and we’ll send the sovereignty one-pager.