Security thinking, grounded in practice

The shift from paper to digital is no longer a question of whether organizations go paperless, but how they do it: with privacy-oriented architecture, regulatory clarity, reliable long-term access, and measurable sustainability benefits. For companies handling sensitive financial, legal, or personnel documents, the bar has risen. Paperless workflows now need to be secure, auditable, interoperable, and resilient.

Digital sovereignty has three dimensions: legal, technical, and operational. Unless all three align, control over data is partial at best. This piece explains what genuine sovereignty requires, why 2026 has made it an operational necessity, and how Switzerland's legal and technical environment delivers it in practice.

Microsoft's flex routing update is a useful lens on a problem most regulated businesses haven't fully confronted: the gap between where data is stored and where it is actually processed. This piece works through what that means under FINMA, DORA, and revDSG, and what to do about it.