kChat (Infomaniak)
A single roll-up of ownership and CLOUD Act exposure.
-
EU-Sovereign This listing EU/EEA/Switzerland-owned and -operated, with no identified CLOUD Act exposure.
-
EU-Based EU-operated, with at most minor or transient US exposure.
-
EU-Hosted EU hosting available, but a US parent or hyperscaler sub-processor creates material exposure.
-
US-Linked Operated by a US-incorporated entity, directly subject to US jurisdiction.
Infomaniak Network SA, Rue Eugène Marziano 25, 1227 Les Acacias (Geneva), Switzerland; Geneva commercial register CH-660.0.059.996-1; VAT CHE-103.167.648
Swiss team chat inside kSuite (Infomaniak, Geneva); own Swiss data centres, open-source Mattermost-based clients, free tier, no E2E.
kChat (Infomaniak) is an EU-owned service hosted in Switzerland, with no identified CLOUD Act exposure. It is listed under Project management.
Assessment notes
kChat is the team-messaging module of kSuite, run by Infomaniak Network SA (Les Acacias, Geneva; founded 1994 by Boris Siegenthaler). Since 1 October 2026 the parent Infomaniak SA is listed on the SIX Swiss Exchange (ticker INFO), while the public-interest Infomaniak Foundation keeps 63.3% of the voting rights through unlisted A shares, so control stays Swiss. Messages and files sit on Infomaniak's own data centres in Geneva, encrypted in transit and at rest (not end-to-end), under an ISO 27001, ISO 9001, ISO 14001 and ISO 50001 certified operator with a public DPA. The only US-owned third parties named in the September 2026 privacy policy handle payments, SMS two-factor codes and fraud checks, never message content, so there is no CLOUD Act exposure.
Findings
- CLOUD Act
- CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
-
- Ownership
- Ownership
Where ultimate control over the operating company sits.
-
EU-owned EU-incorporated and EU-controlled; no significant US ownership.
-
European This listing Swiss/EEA-owned, with no significant US ownership; treated as European.
-
EU HQ, US-funded EU-headquartered but US venture- or PE-controlled.
-
EU subsidiary, US parent European operating company owned by a US parent company.
-
US-owned The operating company itself is US-headquartered.
-
- Sub-processors
- 7 · 3 US
Verified signals
-
EU / adequacy hosting: Yes
-
EU / adequacy operator: Yes
-
No US CLOUD Act exposure: Yes
-
Public DPA: Yes
-
Sub-processors disclosed: Yes
-
Open-source clients: Yes
-
Third-party certification: Yes
Jump to
About kChat (Infomaniak)
kChat is the team-messaging module of kSuite, the collaboration bundle from Infomaniak, the Geneva cloud provider founded in 1994 by Boris Siegenthaler. The contracting entity is Infomaniak Network SA in Les Acacias, Geneva. On 1 October 2026 the parent company, Infomaniak SA, listed on the SIX Swiss Exchange (ticker INFO) through a reverse takeover of Perrot Duval Holding SA, without raising new capital. The public-interest Infomaniak Foundation holds all unlisted A shares and 63.3% of the voting rights, so control stays in Switzerland.
The product follows the Slack model closely: public and private channels, threads, direct messages, file sharing up to 100 MB, audio and video calls through kMeet, and guest accounts for customers and partners. The web, desktop and mobile clients are open-source forks of Mattermost published on Infomaniak's GitHub, while the server side runs on Infomaniak's own API. Integrations work through incoming and outgoing webhooks (one each on the free plan, 20 on Standard, unlimited on Business and Enterprise) and a bot API. Infomaniak's Euria assistant, processed in Switzerland, can summarise threads and transcribe voice messages. SSO and SCIM provisioning are reserved for the Enterprise plan.
Data is stored in Infomaniak's own data centres in Geneva and encrypted in transit and at rest. kChat is not end-to-end encrypted, so teams that need E2E by default should look at Wire or Element. Infomaniak holds ISO 27001, ISO 9001, ISO 14001 and ISO 50001 and publishes a DPA; Switzerland's EU adequacy decision keeps EU to Swiss transfers free of standard contractual clauses.
kChat is only sold inside kSuite. The free kSuite plan includes kChat with 90 days of message history, 10 public and 5 private channels and 5 guests. kSuite Standard costs €1.58 per user per month (excl. VAT) with unlimited history; Business is €6.58 and Enterprise €12.42, with 50% off the first year on annual Business and Enterprise plans. There is no importer for Slack or Teams history yet (Mattermost imports are available on request) and no self-hosted edition.
Best fit: Swiss and EU SMEs that want a Slack-style chat together with mail, storage, video and an online office suite from one Swiss provider, starting free and paying per user only when history limits start to matter.
Sub-processor map · 7
-
MaxMind, Inc. USUnited States
GeoIP lookup of the IP address to detect payment fraud; ancillary, transient
-
PayPal USUnited States
Payment processing when the customer picks PayPal for paid kSuite plans; ancillary, transaction data only
-
Twilio Inc. USUnited States
SMS delivery of two-step verification codes for the Infomaniak account; ancillary, transient (phone number and code only)
-
Checkout.com (Checkout SAS) EUFrance
Card payments and 3-D Secure for paid kSuite plans; ancillary, off the message-content path. Infomaniak's policy notes processing partly on Amazon Web Services in the US
-
PostFinance Ltd EUSwitzerland
Payment processing via PostFinance; ancillary
-
SIX BBS SA (eBill) EUSwitzerland
Invoice delivery via eBill; ancillary
-
TWINT SA EUSwitzerland
Payment processing via TWINT; ancillary
| Vendor | Country | Purpose | Owner |
|---|---|---|---|
| MaxMind, Inc. | United States | GeoIP lookup of the IP address to detect payment fraud; ancillary, transient | US |
| PayPal | United States | Payment processing when the customer picks PayPal for paid kSuite plans; ancillary, transaction data only | US |
| Twilio Inc. | United States | SMS delivery of two-step verification codes for the Infomaniak account; ancillary, transient (phone number and code only) | US |
| Checkout.com (Checkout SAS) | France | Card payments and 3-D Secure for paid kSuite plans; ancillary, off the message-content path. Infomaniak's policy notes processing partly on Amazon Web Services in the US | EU |
| PostFinance Ltd | Switzerland | Payment processing via PostFinance; ancillary | EU |
| SIX BBS SA (eBill) | Switzerland | Invoice delivery via eBill; ancillary | EU |
| TWINT SA | Switzerland | Payment processing via TWINT; ancillary | EU |
Source: the vendor’s published sub-processor list, read 2 Oct 2026.
Frameworks & certifications
Capability matrix
Table 2Capabilities of kChat (Infomaniak)
Integration & access
Compliance & governance
Pricing & tiers
Public documents
Alternatives in this category
-
Netherlands · $10/moEU-BasedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor This listing A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: No Sub-processors: No Open source: Yes -
-
Germany · €19.99/moEU-SovereignCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Not assessed Sub-processors: No Open source: No -
-
Germany · €99/moEU-BasedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor This listing A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: No Sub-processors: Yes Open source: No -
| Product | Sovereignty | CLOUD Act | Signals | From |
|---|---|---|---|---|
Baserow
Netherlands
|
EU-Based | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: No
Sub-processors: No
Open source: Yes
|
$10/mo |
factro
Germany
|
EU-Sovereign | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Not assessed
Sub-processors: No
Open source: No
|
€19.99/mo |
HansaChat
Germany
|
EU-Based | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: No
Sub-processors: Yes
Open source: No
|
€99/mo |