Data storage in Switzerland: what it means for your employee photos

A face isn't a logo. You can swap out your logo; you can't swap out someone's face. That's precisely why an employee photo is different from any other graphic on your website. It belongs to a real person and is legally classified as personal, biometric data. Where that image ends up is becoming a more pressing question than many companies expect.

The shift happened quietly. Remote teams and video-call onboarding have meant that almost every photo passes through a cloud at some point. Ten years ago, the team photo sat on a hard drive in the office. Today it lives on a server somewhere, and the interesting part is figuring out which country that server is in.

Why location suddenly matters

Since Switzerland revised its data protection law, the rules have real teeth. Personal data belongs somewhere you understand, somewhere with clear, enforceable rules. Put your data on a server in a distant legal jurisdiction, and you quickly lose sight of who can access it and when. That becomes a trust problem fast.

At Snaptosuit, your images are stored in Switzerland on CH Object Storage. This isn't a footnote in a marketing brochure. Your employees' portraits never leave the legal framework your company already operates in. If a team member asks where their photo is actually stored, you have a short, honest answer ready.

There's another point that often gets overlooked. Nothing is deleted automatically or quietly in the background. An image disappears only when someone actively clicks delete. That sounds simple, but it's the opposite of how many services work, platforms that quietly decide what stays after a few months. Control stays with you, not with some expiry date running in the background.

What this looks like in practice

Someone leaves the company. In many systems, their portrait lingers somewhere in the data fog, and nobody quite knows where. With Swiss-based storage and deletion on demand, it works differently. Delete the image, remove the person from the directory, done. No guesswork.

Consent matters just as much. A selfie is only processed with the express permission of the person pictured, and each person uploads their own image via a tokenised invitation link. Consent is captured at the moment of upload rather than scrawled on a form in a folder somewhere. Cleanly documented, with no extra work on your end.

The real benefit is unglamorous, and that's a good thing. Next time you roll out new team photos, you won't be left wondering whether you've just created a data protection headache. The look stays consistent, results are ready in minutes, and the images live where your company already calls home.

A good employee photo shows a face that builds trust. It would be a shame if that trust broke down over a question about where the face is actually stored.