Microsoft 365 in Swiss public administrations
Whitepaper in German. 17 pages, April 2026.
The German edition of the French whitepaper for Swiss public bodies. Same sources, same conclusion. For data covered by the Privatim resolution, keys held by Microsoft, including Bring Your Own Key, are not enough. The two options are keeping those files on local systems, or Double Key Encryption with the second key outside Microsoft. Get it if your team works in German and needs the full argument and comparison table.
Get the download
Tell us where to send the link. A business email is required.
The paper sorts administrative data into categories. Ordinary documents can be handled with a risk-based approach. Sensitive personal data, and data under a duty of confidentiality, cannot be stored where the provider can decrypt it.
It then checks each Microsoft key option against that test and explains why each one fails or passes. Staff can keep using Microsoft 365. Only the files that need it get the second key.
The comparison table and DuoKey's deployment, with the key split across HSM instances in Switzerland, are in the PDF. Download the German edition to share the full argument with your team.
FAQ
Is this different from the French edition?
No. It is the same whitepaper in German, dated April 2026.
Who is it for?
IT, security, and data-protection staff in cantonal administrations, communes, and public hospitals using or planning Microsoft 365.
Can staff keep using Microsoft 365?
Yes. Double Key Encryption can be limited, through Purview labels, to files such as social-aid, tax, and personnel records. Search and indexing do not work for that content.
How does DuoKey hold the second key?
Split across software-defined HSM instances on premises and in a private cloud in Switzerland.
Is this legal advice?
No. The paper recommends checking with your cantonal data-protection authority.