Data sovereignty & residency
Choose where the data lives — and who governs it
Communication data, its identities and its metadata stay in the environment you choose — with federation only where you approve it.
Deployment boundaryDegree of control
Letro cloudSwitzerland
Swiss infrastructure, operated by a Swiss companyDedicatedSingle-tenant
Your own homeserver — no shared tenancy, no shared keysSovereignYour infrastructure
Your geography, your administrators, your jurisdictionAir-gappedNo external path
Nothing leaves the network. Federation stays offDeployment boundary · degree of control
Residency is location
Where the data sits at rest.
Sovereignty is control
Who operates it, which law applies, who can administer it, and where it may move.
01Letro cloud
Swiss ground, Letro-operated
Shared Swiss infrastructure. Your rooms stay in Switzerland.
Swiss data centresLetro-operatedShared tenancy
Boundary · Switzerland
You
Tenant
Tenant
Shared ground, separate rooms — nothing crosses the border.
Boundary · your homeserver
Your keys
No shared tenancy
One tenant, one key set, isolated at the edge.
02Dedicated
Your own homeserver
Single tenancy. Separate keys, separate storage.
Dedicated keysIsolated storageOperated by Letro
03Sovereign
Your infrastructure, your jurisdiction
You run it. Federation opens only where you approve it.
Your adminsYour jurisdictionFederation by approval
Boundary · your estate
YouApprovedPeer
Approved homeservers exchange rooms. Everything else stays closed.
Boundary · closed network
No route
Packets stop at the wall. Federation is off, not filtered.
04Air-gapped
No external path
Nothing leaves the network. Federation stays off.
No inbound pathYour infrastructureOn-site only
See air-gapped deployment →
Discuss residency requirements
Tell us your geography, your regulator, and who you need to talk to.