Datacenter Decommissioning Services in Switzerland
By Reboot Monkey Team
Physical decommissioning of server, network, and storage infrastructure across Zurich, Geneva, Basel, and Bern. NIST SP 800-88 data sanitisation, nFADP-compliant chain-of-custody, and certified e-waste disposal under Swiss law. Reboot Monkey operates inside third-party facilities so you never need an engineer on contract.
Last updated: April 9, 2026
Physical Scope: What Decommissioning Covers in Swiss Datacenters
Datacenter decommissioning refers to the complete physical removal, documentation, and disposal of IT infrastructure from a colocation facility, corporate server room, or leased cage. In Switzerland, this work spans the densely connected campuses of Zurich, the international hub of Geneva, the pharmaceutical and logistics infrastructure of Basel, and the government and finance deployments in Bern.
Reboot Monkey field engineers handle every physical step from inside the facility. The scope begins well before the first rack is touched. Engineers conduct a pre-work asset audit, recording serial numbers, asset tags, and slot positions against the customer's CMDB or inventory spreadsheet. Every item is labelled and photographed before removal begins. This creates the baseline chain-of-custody record that nFADP-regulated organisations need to demonstrate data accountability from first contact to final disposal certificate.
Once the inventory baseline is locked, removal proceeds in a planned sequence: network disconnection and cross-connect deprovisioning first, then power disconnection from PDUs and breaker panels, then physical extraction from racks. Swiss facilities typically run at 230V/50Hz with Type J power outlets (the distinctive three-round-pin Swiss standard), which means equipment removal sometimes involves replacing local power whips with IEC connectors before transit. Reboot Monkey engineers are trained to work with Type J power infrastructure and carry the appropriate adapters and tools for every Swiss engagement.
For structured cabling, engineers label every patch cord and fibre run before disconnection, remove cable trays and cable managers where required by the facility's cage handback terms, and document the final state of cross-connect ports for the IX provider or carrier. Swiss-IX connected environments require particular attention to cross-connect deprovisioning timelines: Swiss-IX (AS6730) operates under member notice periods that must be triggered before physical disconnection.
Equipment removed from the facility is palletised, wrapped, and staged in the loading bay pending transport. Chain-of-custody documentation passes to the logistics and ITAD handler at this point. For clients retaining assets for redeployment, Reboot Monkey coordinates secure storage or direct transfer to the destination facility. For assets destined for disposal, the flow continues under ORDEE and SWICO compliance requirements described in the e-waste section below.
Reboot Monkey covers major Swiss colocation facilities including Equinix ZH2, ZH4, and ZH5 in Zurich, Digital Realty ZRH1, Green.ch Zurich and Geneva, NTT Global Geneva, and Swisscom Campus locations in Zurich, Geneva, and Basel. Clients with footprints across multiple facilities can use a single Reboot Monkey engagement to cover all sites under one scope of work, one chain-of-custody record, and one disposal certificate.
- Pre-work asset audit: serial numbers, asset tags, and slot positions documented before first removal
- 230V/50Hz Type J power infrastructure: engineers carry Swiss-specification tools and adapters
- Cross-connect and Swiss-IX deprovisioning managed within member notice periods
- Equinix ZH2, ZH4, ZH5 and all major Zurich and Geneva colocation facilities covered
- Single chain-of-custody record across multi-facility Swiss engagements
NIST SP 800-88 Data Sanitisation and nFADP Compliance
Data sanitisation in Switzerland sits at the intersection of two complementary legal frameworks: the Federal Act on Data Protection (nFADP), which came into force on 1 September 2023, and the NIST Special Publication 800-88 (Guidelines for Media Sanitization), which defines the internationally accepted technical standard for rendering data unrecoverable.
NIST SP 800-88 defines three sanitisation categories. Clear covers logical overwrite techniques applied to media that will be reused. Purge covers cryptographic erasure and verified overwrite techniques that meet a higher assurance level, typically required where media has processed sensitive or classified data. Destroy covers physical destruction methods including degaussing, shredding, and incineration, applied to media that cannot be sanitised to an acceptable assurance level by software means. Swiss organisations regulated by FINMA or processing data covered by nFADP should note that Purge or Destroy is required for storage media that has held data in scope of the Act.
NFADP (SR 235.1, in force 1 September 2023) requires that organisations processing personal data implement technical measures adequate to prevent unauthorised access, including during the disposal phase. The Federal Data Protection and Information Commissioner (FDPIC) can impose administrative penalties of up to CHF 250,000 for willful violations of the Act. Data on decommissioned media that leaves a facility without proper sanitisation documentation represents a direct compliance risk under nFADP. The Act also requires that data processors maintain records of processing activities, which in a decommissioning context means a chain-of-custody record linking each storage device to its sanitisation certificate.
For financial institutions, FINMA Circular 2018/3 on Outsourcing addresses the conditions under which critical IT functions may be delegated to third parties. Decommissioning services contracted to a third-party operator like Reboot Monkey must be documented in the institution's outsourcing register, and the provider must deliver audit-ready records covering the chain of custody, sanitisation method applied, and final disposal pathway for each asset.
Reboot Monkey produces a sanitisation certificate per device for every engagement. The certificate records the device identifier, the NIST 800-88 category applied (Clear, Purge, or Destroy), the tool or method used, the operator identity, and the timestamp of completion. For physical destruction engagements, the certificate is accompanied by a witnessed destruction report or video verification where the client requires it. These records are delivered in a format compatible with FDPIC audit requirements and FINMA outsourcing register obligations.
Clients with requirements under EU GDPR should note that Switzerland received an EU adequacy decision in September 2023, aligning with the nFADP enforcement date. This means personal data can flow between the EU and Switzerland without the need for standard contractual clauses, provided the Swiss organisation is processing that data in compliance with nFADP. Reboot Monkey, as an EU-registered provider, operates under the same adequacy framework, simplifying compliance documentation for multinational clients with both Swiss and EU data estates. Contact Reboot Monkey for a quote tailored to your facility list and compliance obligations at <a href="/en/contact/">rebootmonkey.com/en/contact/</a>.
- NIST SP 800-88 categories: Clear (logical overwrite), Purge (cryptographic/verified), Destroy (physical destruction)
- nFADP (SR 235.1, in force 1 Sept 2023): FDPIC penalties up to CHF 250,000 for willful violations
- FINMA Circular 2018/3: outsourcing register documentation required for third-party decommissioning
- Per-device sanitisation certificate with NIST category, method, operator, and timestamp
- EU adequacy decision (Sept 2023): no SCCs required for EU-Switzerland personal data transfers
Decommissioning Delivery Process: From Kick-Off to Certificate
A structured decommissioning engagement in Switzerland follows five phases. Understanding each phase helps procurement and IT operations teams plan scope, schedule facility access, and align internal approvals before work begins.
Phase 1 is scoping and pre-work planning. Reboot Monkey receives the client's asset inventory (CMDB export, spreadsheet, or rack diagram) and cross-references it against the facility floor plan to build a removal sequence. The removal sequence is planned to minimise downtime for adjacent tenants and to meet the facility's approved working-hours policy. Zurich and Geneva colocation facilities typically require advance notice of 24 to 72 hours for access badge provisioning and loading bay reservation. Reboot Monkey handles all facility communications as part of the engagement.
Phase 2 is the on-site asset audit. Engineers arrive at the facility, verify identity with the security desk, and begin the physical inventory check. Every item in the agreed scope is located, photographed, and cross-referenced with the pre-work list. Discrepancies are flagged to the client's project manager before removal begins. This step is mandatory and non-negotiable: removing unverified assets or skipping the pre-removal audit is a common source of chain-of-custody failures that later creates liability under nFADP.
Phase 3 is structured removal. Removal follows the pre-planned sequence: network, then power, then compute, then storage, then physical infrastructure (cable trays, blanking panels, mounting hardware retained by the client). Engineers complete a rack-by-rack removal checklist as work progresses. For large-scale decommissioning covering 20 racks or more, a second engineer is assigned to document while the first removes, maintaining continuous audit coverage.
Phase 4 is data sanitisation. Storage devices identified in the pre-work audit are sanitised on-site or transferred under seal to an approved destruction facility depending on the method specified. Solid-state drives processed under Purge receive cryptographic erasure using NIST-compliant tooling. Hard drives processed under Destroy are physically shredded. Optical media and flash storage are shredded. Sanitisation is completed before any asset leaves the chain-of-custody control of the Reboot Monkey team.
Phase 5 is documentation and handback. The client receives a complete decommissioning package: the final asset register, the per-device sanitisation certificates, the e-waste disposal certificates from the ORDEE-compliant or SWICO Recycling partner, and the cage handback documentation. For FINMA-regulated clients, Reboot Monkey produces the outsourcing register addendum covering the engagement scope, the technician identities, and the audit trail reference numbers.
End-to-end engagements in a single Zurich colocation cage typically complete within one to two business days for 10 to 20 racks. Larger multi-facility decommissioning projects covering Geneva, Basel, and Zurich simultaneously are scoped and priced on a project basis. Reboot Monkey can coordinate <a href="/en/server-migration/switzerland/">server migration in Switzerland</a> in parallel if the client is consolidating into a remaining facility rather than fully exiting the Swiss market.
- Phase 1: scoping and pre-work planning, facility access provisioning, removal sequence design
- Phase 2: on-site asset audit, photography, CMDB cross-reference before any removal begins
- Phase 3: structured removal in planned sequence (network, power, compute, storage, infrastructure)
- Phase 4: on-site or sealed-transfer data sanitisation to NIST 800-88 standard
- Phase 5: complete documentation package including ORDEE/SWICO certificates and FINMA outsourcing addendum
Cage Handback and Facility Coordination
Returning a colocation cage or suite to the facility operator is a formal process in Swiss datacenters. Equinix ZH2, ZH4, and ZH5 each operate under a cage handback checklist that must be completed and signed off by the facility operations team before the lease or licence agreement is terminated. Similar requirements apply at Digital Realty ZRH1, Green.ch, and NTT Global Geneva. Failure to meet handback conditions results in penalty charges that can run to several months of rack fees.
Typical cage handback requirements in Swiss facilities include: all customer equipment removed, all customer cabling removed (including patch panels, cable trays, and vertical cable managers unless agreed otherwise), all mounting hardware (cage nuts, rails, toolless brackets) removed and offered back to the facility, all floor tiles, containment panels, and blanking panels returned to specification, all cross-connects deprovisioned with the carrier or IX provider, and an end-state walkthrough completed with a facility representative who signs the handback certificate.
Reboot Monkey engineers are trained in the handback requirements of each major Swiss facility. For Equinix facilities, this includes following the Equinix decommissioning checklist, coordinating with Equinix IBX operations for loading bay access and escort scheduling, and obtaining the Equinix-issued cage clearance sign-off. For Digital Realty and Swisscom facilities, the same principle applies under those operators' respective handback procedures.
For clients with cross-connects into Swiss-IX (Switzerland's national internet exchange, hyphenated as Swiss-IX, operating at 1.8 Tbps peak traffic with 350 or more members as of Q1 2026), cross-connect deprovisioning must follow Swiss-IX member procedures. Swiss-IX cross-connects cannot be physically removed until the logical port has been formally deprovisioned through the member portal. Reboot Monkey coordinates this process as part of the engagement scope so physical removal is not blocked by outstanding IX obligations.
For clients connected to CIXP Geneva (Geneva Internet Exchange), the process follows the CIXP member deprovisioning procedure. CIXP serves 120 or more members with a focus on the financial sector, including UN agency networks, NGO connectivity, and Geneva-based banks. The deprovisioning lead time varies by member type and should be factored into the overall project timeline.
Reboot Monkey's cage handback service includes <a href="/en/rack-and-stack/switzerland/">rack and stack support</a> in reverse: where the facility requires that cage infrastructure be returned to a specific configuration, Reboot Monkey engineers restore that configuration as part of the handback work. The client receives the facility's signed handback certificate as part of the final documentation package, which is required for lease termination and any deposit recovery.
- Equinix ZH2, ZH4, ZH5 cage handback checklists: equipment, cabling, mounting hardware, containment, cross-connects
- Swiss-IX (AS6730, 1.8 Tbps peak, 350+ members): logical port deprovisioning must precede physical cross-connect removal
- CIXP Geneva (120+ members): deprovisioning lead times vary and must be built into project timelines
- Cage handback certificate obtained from facility representative and included in client documentation package
- Deposit recovery: signed facility handback certificate required as supporting document
Swiss E-Waste Compliance: ORDEE and SWICO Recycling
Switzerland operates one of the most structured e-waste compliance regimes in Europe. Organisations decommissioning IT equipment in Switzerland must dispose of electronic waste through certified channels under the Ordinance on the Return, Taking Back and Disposal of Electrical and Electronic Equipment (ORDEE, SR 814.620). ORDEE is the Swiss federal ordinance that governs who may collect, transport, and process waste electrical and electronic equipment (WEEE) in Switzerland. Non-compliance with ORDEE carries regulatory risk under cantonal enforcement, and facility operators in Switzerland will not accept waste IT equipment as standard refuse.
For enterprise IT equipment, the practical path to ORDEE compliance runs through SWICO Recycling. SWICO Recycling is Switzerland's leading industry organisation for IT and communications equipment recycling, operating the advance recycling fee (ARF) system that funds certified collection and processing infrastructure. SWICO-certified recyclers accept servers, storage arrays, networking equipment, UPS systems, cabling, and other IT infrastructure removed during decommissioning. SWICO partners operate across all major Swiss cantons, with collection and processing points in the Zurich, Geneva, Basel, and Bern metropolitan areas.
The SWICO Recycling certificate issued after processing documents the weight of material accepted, the equipment categories processed, the processing method applied, and the certification number of the facility. This certificate is the Swiss-specific equivalent of the WEEE compliance certificate used in EU member states. For organisations subject to nFADP or FINMA oversight, retaining the SWICO certificate alongside the sanitisation certificate creates a complete end-of-life documentation record that demonstrates due diligence over the disposal pathway.
Reboot Monkey coordinates ORDEE-compliant disposal through SWICO Recycling partners as a standard part of every Swiss decommissioning engagement. Clients do not need to arrange separate disposal logistics. The SWICO certificate is included in the final documentation package alongside the NIST 800-88 sanitisation records.
For hazardous components, including lithium batteries in UPS systems and server backplanes, mercury-containing displays, and certain cooling system chemicals, disposal follows cantonal hazardous waste regulations in addition to ORDEE. Reboot Monkey's disposal chain includes certified hazardous waste handlers for these components. Clients are not responsible for separately managing hazardous component streams from the decommissioned estate.
A practical comparison of disposal routes available in Swiss decommissioning projects:
<table>
<thead>
<tr><th>Disposal Route</th><th>Regulatory Framework</th><th>Scope</th><th>Certificate Issued</th></tr>
</thead>
<tbody>
<tr><td>SWICO Recycling partner</td><td>ORDEE (SR 814.620)</td><td>General IT hardware (servers, storage, networking)</td><td>SWICO Recycling certificate</td></tr>
<tr><td>Physical destruction (shredding)</td><td>NIST SP 800-88 Destroy + ORDEE</td><td>Storage media with sensitive data</td><td>NIST destruction certificate + ORDEE disposal record</td></tr>
<tr><td>Hazardous waste handler</td><td>Cantonal hazardous waste regulations</td><td>Batteries, certain displays, coolants</td><td>Cantonal disposal manifest</td></tr>
<tr><td>Asset reuse / resale</td><td>NIST SP 800-88 Clear or Purge required first</td><td>Redeployable hardware with residual value</td><td>NIST sanitisation certificate</td></tr>
</tbody>
</table>
For multinational organisations decommissioning across both Switzerland and EU member states in the same project cycle, Reboot Monkey can coordinate <a href="/en/data-center-migration/switzerland/">datacenter migration services in Switzerland</a> for assets moving to an EU facility, ensuring that only assets with no redeployment path enter the disposal stream. This approach typically reduces overall ITAD costs by 15 to 25 percent compared to treating the entire decommissioned estate as waste.
- ORDEE (SR 814.620): Swiss federal ordinance governing WEEE collection, transport, and processing
- SWICO Recycling: industry-certified ARF system covering servers, storage, networking, UPS, and cabling
- SWICO certificate: documents weight, equipment categories, processing method, and certification number
- Hazardous components (lithium batteries, mercury displays): handled under cantonal hazardous waste regulations
- Asset reuse path: NIST Clear or Purge applied before any redeployment to reduce overall disposal volume
Who Uses Datacenter Decommissioning Services in Switzerland
The buyers of third-party datacenter decommissioning services in Switzerland fall into clearly defined segments. Understanding which segment matches your situation helps determine the right scope, timeline, and compliance requirements for your engagement.
Financial services organisations represent the largest segment of decommissioning buyers in Switzerland. UBS, Credit Suisse successor entities, cantonal banks, insurance groups, and fintech companies operating in Zurich and Geneva face the combination of FINMA Circular 2018/3 outsourcing documentation requirements, nFADP data accountability obligations, and Swiss banking secrecy obligations that require technician NDAs for any engagement inside banking-grade facilities. For these organisations, decommissioning is not an IT housekeeping task: it is a regulated activity with an audit trail. Reboot Monkey's chain-of-custody documentation and FINMA-compatible outsourcing register addendum directly addresses this requirement.
Pharmaceutical and life sciences organisations based in Basel and the greater DACH corridor, including companies in the Roche, Novartis, and Sandoz supply chain, operate IT infrastructure subject to both Swiss data protection law and sector-specific validation requirements for GxP-relevant systems. Decommissioning validated laboratory information systems or clinical data servers requires decommissioning qualification documentation in addition to standard NIST sanitisation records. Reboot Monkey can produce the physical decommissioning records required to support DQ (decommissioning qualification) documentation.
International organisations headquartered in Geneva, including UN agencies, the International Committee of the Red Cross, and the World Health Organization, require decommissioning services that combine physical security, confidentiality NDAs, and a vendor-neutral provider not affiliated with any single national government or facility operator. Reboot Monkey's vendor-neutral positioning as an independent third-party operator, not the facility's in-house team, meets this requirement.
Multinational technology and industrial companies with Swiss holdings frequently use a Switzerland decommissioning engagement as part of a DACH-wide infrastructure consolidation. Reboot Monkey's cross-border coverage across Germany, Austria, and Switzerland means a single provider can manage the full consolidation scope. <a href="/en/remote-hands/switzerland/">Remote hands support in Switzerland</a> is available for ongoing management of the residual infrastructure during the transition period before full decommissioning.
SMB and mid-market organisations that have outgrown or are exiting their first Swiss colocation footprint represent a growing segment. These organisations often lack internal resources to manage the handback, sanitisation, and disposal process. For these clients, a fixed-scope decommissioning engagement provides certainty on cost, timeline, and compliance documentation without requiring an internal project team.
For any organisation planning a Swiss decommissioning project, the first step is a scoping call to confirm the asset inventory, facility access requirements, sanitisation level needed, and documentation format required for compliance. <a href="/en/contact/">Contact Reboot Monkey</a> to start the scoping process. The scoping call is at no charge and typically takes 30 minutes.
- Financial services: FINMA Circular 2018/3, nFADP, banking secrecy NDA requirements covered
- Pharma and life sciences (Basel): decommissioning qualification records for GxP-relevant systems
- International organisations (Geneva): vendor-neutral provider, confidentiality NDAs, no facility-operator affiliation
- DACH consolidations: single Reboot Monkey engagement covers Switzerland, Germany, and Austria
- SMB/mid-market: fixed-scope engagement with compliance documentation, no internal project team required
Reboot Monkey Services in Switzerland
Remote Hands
On-demand physical tasks inside Swiss colocation facilities: reboots, visual checks, cable swaps, and media transfers, dispatched within SLA.
Smart Hands
Technical on-site support for network configuration, OS-level troubleshooting, hardware diagnostics, and firmware updates inside Swiss datacenters.
Rack and Stack
Professional server, storage, and network equipment installation, cabling, and commissioning inside Zurich, Geneva, Basel, and Bern colocation facilities.
Server Migration
Physical server relocation between Swiss facilities or across the DACH region, with pre-migration audit, secure transport, and post-migration validation.
Datacenter Migration
End-to-end physical migration of full datacenter estates across Swiss facilities, coordinating removal, transport, installation, and handback.
Datacenter Decommissioning
Full physical decommissioning of Swiss colocation cages and server rooms including asset removal, NIST 800-88 sanitisation, ORDEE/SWICO disposal, and cage handback.
Frequently Asked Questions
What does datacenter decommissioning in Switzerland include?
Datacenter decommissioning in Switzerland covers the complete physical removal of server, storage, and network equipment from a colocation cage or server room. It includes a pre-work asset audit, structured removal following facility procedures, NIST SP 800-88 data sanitisation, ORDEE/SWICO-compliant e-waste disposal, cage handback coordination with the facility, and a full documentation package. Reboot Monkey covers major facilities in Zurich, Geneva, Basel, and Bern.
Which data sanitisation standard applies for Swiss decommissioning projects?
NIST SP 800-88 (Guidelines for Media Sanitization) is the applicable international standard. It defines three categories: Clear (logical overwrite for reusable media), Purge (cryptographic erasure or verified overwrite for higher assurance), and Destroy (physical destruction for media that cannot be adequately sanitised by other means). Swiss organisations subject to nFADP or FINMA oversight should apply Purge or Destroy for storage media that has held personal or regulated data.
What does the nFADP require for decommissioned storage media?
The Swiss Federal Act on Data Protection (nFADP, SR 235.1) came into force on 1 September 2023. It requires organisations to implement technical measures adequate to prevent unauthorised access to personal data, including during the disposal phase. Decommissioned storage media must be sanitised and documented. The Federal Data Protection and Information Commissioner (FDPIC) can impose penalties of up to CHF 250,000 for willful violations. A per-device sanitisation certificate linked to a chain-of-custody record is the standard way to demonstrate compliance.
What is FINMA Circular 2018/3 and how does it affect IT decommissioning?
FINMA Circular 2018/3 on Outsourcing sets the requirements under which Swiss-regulated financial institutions may delegate IT functions to third parties. When a bank or insurance company contracts a third party to perform decommissioning, the engagement must be documented in the institution's outsourcing register and the provider must deliver audit-ready records covering chain of custody, sanitisation method, and disposal pathway. Reboot Monkey produces an outsourcing register addendum as a standard deliverable for FINMA-regulated clients.
How is e-waste disposed of after decommissioning in Switzerland?
E-waste from Swiss decommissioning projects is disposed of under ORDEE (SR 814.620), the Swiss federal ordinance governing waste electrical and electronic equipment. For enterprise IT hardware, disposal routes through SWICO Recycling-certified partners, which operate the advance recycling fee (ARF) system across all major Swiss cantons. Reboot Monkey coordinates ORDEE-compliant disposal and delivers the SWICO Recycling certificate as part of the final documentation package. Hazardous components such as lithium batteries are routed to cantonal hazardous waste handlers.
Does Reboot Monkey handle cage handback at Equinix Zurich?
Yes. Reboot Monkey handles cage handback at Equinix ZH2, ZH4, and ZH5 in Zurich. This includes completing the Equinix decommissioning checklist, coordinating with IBX operations for loading bay access and escort scheduling, deprovisioning cross-connects with Swiss-IX and other carriers, and obtaining the facility's signed cage clearance certificate. The signed handback certificate is delivered to the client as part of the final documentation package and is required for lease termination and any deposit recovery.
What power standards should I know about for Swiss decommissioning work?
Swiss datacenters operate at 230V/50Hz with Type J power outlets, the distinctive three-round-pin Swiss standard. Equipment removal in Swiss facilities often requires replacing local power whips with IEC connectors before transit. Reboot Monkey engineers are trained for Type J infrastructure and carry the required tools and adapters for every Swiss engagement, so clients do not need to provision separate tooling for power disconnection work.
Can Reboot Monkey decommission across multiple Swiss cities in one project?
Yes. Reboot Monkey covers Zurich, Geneva, Basel, and Bern in a single engagement scope. Multi-facility decommissioning projects are managed under one chain-of-custody record, one documentation package, and one ORDEE/SWICO disposal certificate covering all sites. For clients consolidating from multiple Swiss cities into a single facility, Reboot Monkey can coordinate parallel decommissioning and migration work so both the exit and destination sides are managed by the same provider.
Plan Your Swiss Datacenter Decommissioning
Reboot Monkey provides fixed-scope datacenter decommissioning across Zurich, Geneva, Basel, and Bern. NIST SP 800-88 sanitisation, nFADP-compliant chain-of-custody, ORDEE/SWICO disposal, and cage handback in one engagement. Contact us to start scoping.
Request a Quote