Public Sector IT Outsourcing in Switzerland

Today, municipalities and institutions in French-speaking Switzerland manage information systems that are just as demanding as those of a private company, but with constraints specific to the public sector. Sensitive citizen data, the obligation to ensure service continuity, regulatory compliance, and tight budgets: a local government’s IT infrastructure tolerates neither improvisation nor downtime. Outsourcing all or part of its IT operations therefore becomes an obvious solution. Here’s why and when to do it.

IT Challenges Unique to the Public Sector

A municipality or quasi-public institution handles particularly sensitive personal data: civil status, taxation, social assistance, health, and school records. For municipalities, cantonal data protection laws apply, with requirements similar to those of the revised FADP (Federal Act on Data Protection), which governs the private sector. In both cases, any transfer of data abroad is strictly regulated: it must be made to a country that offers an adequate level of protection. Hosting data in Switzerland therefore remains the safest solution to stay within this framework without adding complexity. A sovereign Swiss cloud, with data hosted within the country, protects both citizens and the local government’s liability.

Added to this is cybersecurity, and the Swiss figures speak for themselves. Nationwide, the Federal Office for Cybersecurity recorded nearly 65,000 reports in 2025, an increase compared to 2024 [source: OFCS 2025 Annual Report]. And municipalities are on the front lines, often ill-prepared: according to the 2025 survey of 621 Swiss municipalities conducted by the Association of Swiss Municipalities, the Ma Commune association, and the FHNW, only one in two municipalities has an emergency plan, nearly half of the municipalities in French-speaking Switzerland admit they do not have a complete inventory of their IT systems, and about 60% consider themselves “behind the curve” when it comes to digitization [source: ACS / Ma Commune / FHNW survey, 2025].

There are well-documented precedents: in 2021, two municipalities in the Lake Geneva region suffered cyberattacks that went as far as the publication of their residents’ data on the dark web. For a local government, an attack that shuts down a service counter or exposes residents’ data carries both political and operational costs. Serviccontinuity, however, is non-negotiable: citizens must be able to access their services, and employees must have access to their tools, every workday.

Why In-House IT Quickly Reaches Its Limits

Many local governments in French-speaking Switzerland operate with just one or two people in charge of IT, sometimes part-time, and often wearing multiple hats. This model works as long as everything is running smoothly, but as technology evolves, it becomes increasingly difficult (yet essential) to have experts in every field.

Recruiting specialized professionals is difficult and costly, and it will remain so: Switzerland will need 128,600 additional ICT specialists by 2033 and will still face a projected shortage of 54,400 professionals [source: ICT-Vocational Training Switzerland, 2025].

Reliance on a single person also creates a real risk: absence, departure, or burnout. Municipalities are well aware of this: up to 60% express a need for increased external support, particularly for risk management, security guidelines, emergency planning, and training [source: ACS / Ma Commune / FHNW survey, 2025].

Outsourcing does not mean giving up control of your IT; it means relying on a team that covers the full range of expertise, around the clock.

When to Consider Outsourcing

Outsourcing isn’t an all-or-nothing choice. A local government can entrust its complete IT management or just a portion of its services—such as cybersecurity, hosting, or support—while retaining control over its decisions. As with any change, the ideal approach is to plan this transition in advance, but very often the decision is made in response to a specific event: a security incident, a departure from the IT team, an aging system that has become impossible to maintain, a cloud migration, a merger of municipalities, or a new compliance requirement— all of which are reasons to reconsider. Sometimes, it’s simply the feeling of being at the mercy of one’s IT systems rather than in control of them.

360° Expertise as a Necessity

Security, infrastructure, cloud, day-to-day support, strategic consulting: these areas no longer operate in silos. A security breach can stem from a missed update; a poorly prepared cloud migration can create a security vulnerability; an infrastructure choice can complicate compliance with cantonal data protection laws...

For a local government, having a partner that covers all of these areas of expertise—rather than relying on multiple specialized service providers—avoids gaps in responsibility and ensures a coherent view of its information system, from the workstation all the way to data hosting.

A Local Partner

For a municipality, proximity isn’t just a sales pitch—it’s a practical necessity. A service provider with a presence in French-speaking Switzerland, with several offices spread across the region, can respond quickly on-site when a problem arises—not just over the phone. This local presence also facilitates the relationship: you know who you’re dealing with, you speak the same language, and you understand how a local government operates.

Selection Criteria for a Local Government

• Hosting and data sovereignty: Does the data comply with the current legislation?
• True proximity: Can the service provider respond on-site with teams based in French-speaking Switzerland?
• Scope of expertise: Are consulting, managed services, cybersecurity, and cloud services all covered by a single partner?
• Stability and sustainability: organizational structure, experience, and track record in the public and quasi-public sectors.
• Compatibility with public procurement: ability to properly respond to a request for proposals and document its services.
• Support model: response times, dedicated contact person, transparency regarding service interventions.

FAQ

Does a small municipality really need to outsource its IT?

Size does not reduce obligations: a small municipality handles the same sensitive data and faces the same compliance requirements as a large one, but with fewer internal resources. Outsourcing—even partial—ensures security and business continuity without overstaffing a team.

Where is the data hosted if we outsource?

With a partner offering a Swiss sovereign cloud, data is hosted in Switzerland and processed in accordance with cantonal data protection l. This is a point that must be explicitly verified in any IT outsourcing contract for a local government.

How can outsourcing be reconciled with public procurement rules?

A service provider experienced in the public sector knows how to respond to a request for proposals and document its services transparently. The public procurement process remains under the local government’s control; the partner simply participates in it.

Conclusion

Outsourcing the IT operations of a municipality or institution means securing its data, ensuring the continuity of public services, and freeing its teams from tasks they can no longer handle on their own. The key: a partner based in French-speaking Switzerland, with on-the-ground experience and equipped to meet the demands of the public sector. Let’s discuss your situation: contact our teams or stop by one of our offices in French-speaking Switzerland.