About Schweizerform
We built the form provider we wanted to use.
Schweizerform exists because the question "where does my form data go?" deserves a clear answer. We're a small Swiss team building a form platform that physically cannot read the data its customers collect. This page is what we believe — and why.
2025
Founded · Canton Glarus
100%
Swiss-hosted infrastructure
0
Third-party trackers in the product
Self-funded
No VC · no growth-at-all-costs
Origin
Why this product exists.
Schweizerform exists because the honest answer to "where does my form data go?" is almost never reassuring. Most form tools encrypt during transit and then store your answers in plain, readable form — meaning the company running the service, and anyone who breaks in, can read every submission. For sectors where confidentiality is a regulation, not a preference, that's unworkable.
So we built the form tool we wanted to use ourselves — designed so that we, the operator, are mathematically locked out of the data. Even under a court order, even if someone steals our database, even if our own engineers turned malicious, the submissions stay unreadable. The starting key for the whole chain lives only in the customer's head.
The architecture hasn't changed since day one: encryption runs in the browser using industry-standard primitives (AES-256-GCM for the answers, RSA-OAEP for sealing the keys, PBKDF2 to derive your Access Code into a usable key), and everything is hosted in Switzerland. We earn revenue from subscriptions, not from data. We will never train an AI model on your forms — because we don't have your forms in any form we could train on.
The point of cryptography is not to convince you to trust us. The point of cryptography is to make trust unnecessary.
Our founding principle · printed in the office
What we believe
Four things we will not negotiate on.
Value 01
Architecture over assurance.
Promises can be broken; architecture can't. If we don't have the keys, no amount of pressure on us (or misbehaviour from us) gets your data. Everything else flows from this.
Value 02
Sovereignty is physical.
A "data residency" clause in a contract is just a checkbox in someone's control panel. We run the whole stack — application, database, file storage, and email — inside Switzerland, because that's the only durable form of sovereignty.
Value 03
No third-party scripts. Ever.
The respondent's browser is not a place to plant trackers. Schweizerform ships zero third-party JavaScript on public form pages. The only network the respondent's browser ever touches is ours.
Value 04
Honesty about what we can't do.
"Forgot password — click here to recover everything" is a feature that quietly tells you the provider had your keys. We document our limits up front: lost Access Code = lost data. We'd rather lose a sale than mislead you about it.
Roadmap
Slow, deliberate, public.
We don't ship for press cycles. We ship when something is right. Here's what we've done and what we're working on.
2025 · Foundation
The architecture decision
We chose zero-knowledge as a hard rule — not a feature to bolt on later. Designed the four-layer chain of keys that starts in the customer's Access Code and never leaves their device.
2025 · Initial release
Available in Switzerland
Launched the product to Swiss customers with end-to-end encryption included on every plan — including the free one.
2026 · Now
Maturing the product
Four-locale public forms, reusable form profiles, in-browser submission viewer, publicly documented security architecture.
Next
Planned
Independent security audit of the client-side cryptography. Wider availability beyond Switzerland is on the longer-term roadmap.
Open promises
Things we commit to in writing.
Not "company values." Real, observable commitments. If we ever break one, you'll know — and you'll get a clear notice the day it happens.
We will never weaken the encryption.
If we ever change cryptographic primitives, it will be to strengthen — not to enable any back door, "key escrow," or operator-side recovery.
We will keep the data in Switzerland.
Even if international expansion brings cheaper hosting elsewhere — submission ciphertext and metadata stay on Swiss infrastructure.
No third-party JS on public forms.
The page your respondent sees will never load Google Analytics, advertising pixels, "support chat" widgets, or anything we don't control end-to-end.
If we're acquired, customers are told first.
An acquisition that changes data custody is a material event. We'll communicate it before the closing and offer a no-questions-asked transition window.
Transparent incident handling.
Any incident affecting customer data is disclosed within the legal window and published on our status page in clear language. No PR-speak.
No surveillance pricing.
We charge a flat subscription. We will never sell, share, or auction your usage data, and we will never run advertising of any kind.
Built for
Sectors where confidentiality matters most.
Schweizerform is engineered around the data-handling needs of these industries — where leaking a single submission is unacceptable.
Healthcare
Patient intake · consent · referrals
Legal & tax
Mandate intake · privileged data
HR & people ops
Whistleblower · candidate forms
Research & academia
IRB consent · participant intake
Government & cantons
Citizen services · consultations
Where we are
Schweizerform
Based in canton Glarus, with a small distributed team and an office that is quieter than you would expect. We answer email — and we read every word.
HQ
Canton Glarus, Switzerland
Based in canton Glarus, with a distributed team across Switzerland.
General contact
support@schweizerform.ch
One inbox for support, sales, compliance and disclosure. Real humans, Swiss-formal tone.