Hikube is the public cloud of Hidora SA (Avenue des Morgines 12, 1213 Petit-Lancy; UID CHE-286.910.173, entered in the Geneva commercial register in September 2016), a Geneva hosting company led by its founder and CEO Matthieu Robin. Hikube opened in 2025 on a Kubernetes-native open-source stack (Talos Linux, Cilium, KubeVirt for virtual machines) and covers cloud instances, CNCF-certified managed Kubernetes with a dedicated control plane per cluster, six NVIDIA GPU models from the L4 to the H200, managed PostgreSQL, MariaDB, Redis, MongoDB and ClickHouse, managed Kafka and RabbitMQ, block storage, S3-compatible object storage with WORM, Backup as a Service and Vault as a Service. Hidora is a CNCF Kubernetes Certified Service Provider. Consumption is metered hourly and invoiced monthly in CHF or EUR excluding VAT; the smallest instance (s1.small, 1 vCPU and 2 GB RAM) lists at CHF 24 per month, a managed Kubernetes control plane at CHF 32 per month and GPUs from CHF 165 per month. A 14-day trial needs no card. Infrastructure as code is covered by ready-made Terraform templates in the documentation rather than a published provider.
Customer workloads run in three Swiss data centres linked by private interconnect: STACK Infrastructure GEN01 in Geneva, STACK Infrastructure GEN02 in Gland and EWL Stollen, an underground site in Lucerne run by the local utility. Persistent volumes replicate synchronously or asynchronously across the sites, and nothing is replicated outside Switzerland. The live endpoints match the claim: the console, API, identity service and S3 endpoint all resolve into an address block registered to Hidora SA under its own network (AS56798), with no US CDN in front. Hidora is unusually precise about who answers for what. The building certifications (ISO 27001, ISO 9001 and ISO 50001 at all three sites, ISO 14001 at the two STACK sites) belong to the site operators, while Hidora's own ISO/IEC 27001:2022 was confirmed in the SQS certification register (certificate 48064, issued to Hidora SA in Petit-Lancy, not suspended); the certificate PDF and its scope are supplied on request. Two of the three buildings belong to STACK Infrastructure, owned since 2022 by the US investment firm IPI Partners. As a colocation landlord without logical access to customer systems it does not count toward the CLOUD Act rating, which is None for the workload path.
The paperwork is better than Hikube's own summary suggests, with one real gap. The DPA is public: it is Appendix D of Hidora's general terms (October 2025 edition), readable without a login, governed by Swiss law and covering instructions, confidentiality, security measures, sub-processors, breach notification and deletion, even though Hikube's security page still lists it as available on request. What is not public is the sub-processor register that Appendix D says Hidora maintains. The same appendix also allows ancillary processing (anti-DDoS, monitoring, support, backups) by sub-processors outside Switzerland and the EEA under standard contractual clauses without naming them, which sits uneasily with the security page's statement that backups stay in Switzerland, and it is why the score stops at 4/5. The surrounding company stack, compiled by this directory from the privacy notice and DNS, is conventional: the marketing site runs behind Cloudflare with Cloudflare Turnstile on its forms, sales leads and quotes go to HubSpot, company mail is on Google Workspace, the documentation is published on GitHub Pages and the status page on StatusPal (Berlin). None of these touches customer workloads. Object storage encryption is optional rather than on by default, and enterprise SSO is announced but not yet available.