Private AI
Secure and sovereign AI Solutions — in Switzerland, under your control


AI Inferencing Services
Private AI lets you run AI models in an environment you fully own and control. The data is not shared with third parties for the purpose of training or any other reason. This ensures that confidential data of an organisation stay confidential.
Safe Swiss Cloud provides a suite of industry standard AI services with its “Private AI” (PAI) product family. It includes conversional AI/chat, access to large language models (LLMs) via API, Enterprise and Developer tools, integration services like MCP servers to make enterprise systems accessible to AI, support for agentic AI including workflows and support services for AI.
All data including prompts, results and logs stay in Safe Swiss Cloud’s Swiss data centres and under the control of the customer. This ensures regulatory alignment, deep integration into customer’s internal systems enabling tailor made AI workflows—without data leaving your control.
Private AI Chat (PAI Chat)
Secure, Swiss-hosted AI chat built for teams that need power, privacy and control.
PAI Chat gives your team a fast, secure and truly private AI Chat with open source LLMs, hosted by Safe Swiss Cloud in Swiss data centres. Built for normal and power users alike, PAI Chat combines enterprise-grade privacy with real productivity features like shared prompts, saved workspaces and organisation-wide governance. Analyse documents, explore ideas, write code or get research support.
Private AI API (PAI API)
Programmatic access to Swiss-hosted private LLMs for applications and automation.
PAI API lets developers use a standard OpenAI compliant API to access LLMs, hosted by Safe Swiss Cloud in Swiss data centres. This can be used to AI enable your applications, create workflow automations or manage backend systems. Customers get fast, reliable access to multiple models with unified responses, smart routing options and full flexibility.
Private AI Tools
Enterprise and developer tools with advanced controls for secure, scalable AI operations.
PAI Enterprise & Developer extends PAI Chat and PAI API with observability, providing advanced analytics and management functionality to analyse resource and token usage etc. Self management functionality over resources with IAM integration and role-based access. It’s the straightforward way to run secure, compliant and well-governed AI across your entire organisation.
Private AI Integration Services
Make your enterprise data securely available to private LLMs hosted at Safe Swiss Cloud.
PAI Integration Services make your private systems where your data actually lives — from file servers and ERPs to CRMs, email and ticketing tools to LLMs hosted by Safe Swiss Cloud in Swiss data centres. Safe Swiss Cloud creates securely managed MCP servers to AI enable your applications. It’s the easiest path to AI-ready data, seamless automations and end-to-end workflow integration.
PAI Agentic
Autonomous Workflows: From Prompt to Action
Agentic AI with PAI brings intelligent decision-making into automated workflows. Systems call the LLM hosted at Safe Swiss Cloud in Swiss data centres via API and let it determine the next action for each input, combining structured execution with reasoning at every step. Your workflow engine handles tasks reliably, while the LLM adds the intelligence needed for complex, multi-step processes. It’s a fully supported path to smart, compliant automation in a sovereign environment.
PAI Support
Reliable, year-round support with guaranteed response times and direct access to engineers.
PAI Support gives your organisation flexible, reliable access to Safe Swiss Cloud experts. Annual packages provide a set number of hours valid for 12 months, billed monthly and usable across all services — including every Private AI offering. With a 7×24 SLA, one-hour maximum response time and a direct emergency hotline to qualified engineers, your team always gets the help it needs, exactly when it matters.
Ready for Private AI?
In our free briefing, we show you how to use AI productively and securely in the company – without data risks and compliance concerns.
What is Private AI?

Private AI is the deployment of large language models (LLMs) within a sovereign computing environment which does not allow access to your data to unauthorised third parties. Unlike public AI services, this eliminates the risk of unintended data exposure of your proprietary and confidential data, of its use for training models or conflicts with data-residency regulations.
Organisations adopt Private AI when they want to make sure that their proprietary and confidential data does not get exposed. Private AI stacks typically use open models (e.g., Apertus, Llama, Mistral, Gemma, GPT-OSS, Qwen, DeepSeek etc.) hosted on sovereign GPU-infrastructure.
LLM Models at Safe Swiss Cloud: Core Characteristics
Choose from a rich catalog of sovereign LLMs – all with the same strict privacy and compliance guarantees. Safe Swiss Cloud’s Private AI (PAI) services combine a broad selection of open-source LLMs with a consistent security, privacy and compliance foundation. You keep full control over data, infrastructure and model choice, while we provide the sovereign hosting and operational excellence
Which LLM Models are supported by PAI?
SSC provides access to the following open source large language models. These are provided as-is with no warranties:
| Model | Type | Details |
| apertus-70b | Chat | Optimized for multilingual dialogue use cases. |
| bge-m3 | Embedding | Optimized for Embeddings and parse retrieval with support for Multi-Functionality, Multilinguality, and Multi-Granularity. |
| bge-reranker-v2 | Reranker | Optimized for Reranker to get relevance score. |
| deepseekr-v32 | Chat | Optimised for reasoning chat completions |
| deepseek-ocr | OCR | Optical Character Recognition |
| gemma-12b-it | Multimodal | Optimized for handling text and image input and generating text output. |
| gemma4-31b | Multimodal | Optimized for handling text and image input and generating text output. |
| gpt-oss-120b | Chat | Optimized for powerful reasoning, agentic tasks, and versatile developer use cases. |
| granite-33-8b | Chat | Optimized for Reasoning and instruction-following capabilities. |
| granite-emb-278m | Embedding | Optimized for Embeddings. |
| granite-vision-2b | Multimodal | Optimized for compact and efficient vision-language model |
| llama4-maverick | Chat and multimodal | Optimized for text and multimodal experiences. |
| llama4-scout-17b | Chat and multimodal | Optimized for text and multimodal experiences. |
| mistral-v03-7b | Chat only | Optimized for multilingual dialogue use cases. |
| qwen3-8b | Reasoning | Optimized for thinking and reasoning. |
| qwq-32b | Reasoning | Optimized for thinking and reasoning. |
| qwen3-vi-235b | Multimodal | Optimized for text and multimodal experiences. |
| whisper-large-v3 | Speech to Text | For converting speech to text. |
Other commercial or proprietary LLMs can also be integrated depending on licensing and infrastructure requirements.
Characteristics of all Private AI Services
Private AI (PAI) involves SSC providing Customers with sovereign Private AI solutions. The following service characteristics apply to all of Safe Swiss Cloud‘s PAI services.
- Multi-lingual LLMs provide you access to knowledge from any language with results being delivered in your own language.
- Choice of models: Select from a large catalogue of open large language models (LLMs) including DeepSeek, Llama4-Maverick, Apertus, Mistral and many more.
- Sovereign AI by design: All LLMs are privately hosted in Switzerland, by Swiss owned entities. Your data always stays under your control. Your data is processed strictly in accordance with Swiss and privacy regulatio
- Privacy: Your data is processed strictly in accordance with with the Swiss Data Privacy Act (DSG) and EU GDPR.
- No Training, Retraining or Fine Tuning of the LLMs with your data.
- ISO Certifications: 27001, 27017, 27018.
- Conforms to the C5 and NIS2 standards
- 100% hosted in Swiss data centers under Swiss control.
Why Private AI?

Sovereignty matters
Public AI is useful—but it can conflict with enterprise privacy, compliance and change control. Private AI keeps prompts, data and outputs inside your perimeter, with model versions you govern.
AI systems hosted by US-controlled providers fall under the US CLOUD Act, even when infrastructure is outside the US. That exposure conflicts with Swiss/EU data-protection expectations. Hosting in Swiss sovereign infrastructure under Swiss control avoids this risk.
Safe Swiss Cloud commitments
- Full privacy: Data is used strictly to provide the contracted service—no training on your proprietary data unless you opt in.
- Hosted by Safe Swiss Cloud in Swiss data centres.
- Swiss law & control: Services run under Swiss law (aligned with EU law); all service entities are Swiss-controlled.
- Not subject to US CLOUD Act coercion: As a fully Swiss-controlled IT group, Safe Swiss Cloud cannot be compelled to disclose customer data by US law.
Outcome: predictable operations, regulatory alignment (GDPR, DSG, FINMA, DORA) and audit-ready AI.
Private AI vs Public AI
| Feature | Public AI Generic Provider | Private AI at Safe Swiss Cloud |
|---|---|---|
| Data Privacy | Data sent to and processed on provider’s servers can be used to train models, leading to potential leaks of proprietary data. | All processing remains within a controlled, secure environment owned by the enterprise. No third-party access. |
| Compliance | Compliance depends on provider; may not meet industry-specific or jurisdictional requirements. | Meets strict regulations such as GDPR, HIPAA, FINMA, DORA, ensuring legal and audit readiness. |
| Use of your data | May be stored/used for ongoing model training with limited control. | No use for training unless you explicitly opt in. Default: zero use. |
| Integration | Limited to public APIs; no deep access to internal systems. | Direct, secure integration via MCP, APIs and private connectors. |
| Customisation | Minimal to none. | Full control: model choices, behaviour, workflows and guardrails. |
| Hosting Options | Restricted to provider infrastructure. | Hosted by Safe Swiss Cloud in its Swiss data centres. |
| Support | Generic, limited scope/hours. | 24/7 expert support by ISO-certified engineers. |
| Data Sovereignty / CLOUD Act | May be subject to foreign jurisdiction (e.g., CLOUD Act). | Swiss-controlled hosting; not subject to US CLOUD Act coercion. |
Who is Private AI (PAI) for?
We help Swiss and international customers to implement their Private AI strategies within their preferred environment.

Healthcare and Legal
Hospitals and research institutions process patient data with AI models that remain fully compliant with healthcare privacy laws such as HIPAA, ensuring no leakage of sensitive information.
Financial Services
Banks and insurers use Private AI to streamline regulatory reporting, detect fraud in real time, and provide personalised yet compliant customer service.
Software Companies
Software companies use this sovereign AI service to AI enable their software (SaaS). This allows them to comply with Swiss (DSG) and European (GDPR) data laws.
Enterprises with Sensitive Data
Companies in manufacturing, defence, and technology protect trade secrets and intellectual property by keeping all AI processing inside secured infrastructure.
How to get started

- Initial briefing – We assess your goals, compliance requirements, and current IT landscape to determine the optimal AI architecture.
- Quotation – We help you size the AI solution that meets your requirements and give you a quotation for what you need.
- Order and Start Using – Start using PAI Chat, PAI API and PAI Enterprise and Development almost immediately.
FAQ
Questions and answers about Private AI by Safe Swiss Cloud
Private AI at Safe Swiss Cloud means three things:
- Customer data — prompts, replies, and AI output — is never used to train models.
- Customer data is handled in accordance with the Swiss Data Protection Act (DSG) and the EU’s GDPR, ensuring full privacy compliance.
- The infrastructure is sovereign, meaning it is not subject to arbitrary service interruptions for non-technical reasons.
Safe Swiss Cloud’s Private AI complies fully with the revised Swiss Data Protection Act (CH DSG) and the EU GDPR.
No. Prompts and responses are not stored in logs and therefore cannot be viewed or traced by Safe Swiss Cloud staff.
Yes. Every customer receives their own dedicated front end and RAG (Retrieval-Augmented Generation) system. Prompts are fully isolated from one another and have no cross-customer side effects.
Yes. This option is more expensive because it involves dedicated GPUs for a single customer. It is a viable solution for customers with sufficient workload volume and strict compliance requirements for a dedicated AI infrastructure.
Swiss law requires that Safe Swiss Cloud may only hand over customer data to non-Swiss or foreign governments if a warrant issued by a Swiss court under Swiss law has been served. This provides a robust legal barrier against extraterritorial data access requests.
Yes. The technical privacy features, together with the regulatory frameworks of the Swiss Data Protection Act and the EU GDPR, ensure that the Private AI environment is suitable for regulated data, including healthcare and financial data.
Yes. Safe Swiss Cloud offers dedicated GPU and storage clusters for individual customers.
Backups are always encrypted. Snapshots of an encrypted volume are also encrypted. Customers can additionally choose to encrypt data at rest, which ensures that all snapshots remain encrypted and cannot be used in any way other than intended.
We use open-source models accessible via the industry-standard OpenAI API. This allows customers to switch models and providers as needed, without being locked into proprietary formats or interfaces.
All AI data and models are stored and processed exclusively in Switzerland.
Safe Swiss Cloud uses open-source models and does not train — or contribute to training — these models. As a result, customer data (prompts, AI output, logs, etc.) is never used for any purpose other than what the customer explicitly requests. This prevents confidential information from inadvertently entering the public domain.
Many publicly available AI services silently use customer data for training. For example, an employee who uploads a file containing confidential information to a public AI service may see that data incorporated into a future large language model (LLM) iteration — potentially enabling a competitor to retrieve proprietary information in a future query.
Safe Swiss Cloud offers an SLA with 99.9% uptime. For paid support plans, the guaranteed response time is a maximum of one hour.
We offer services to develop MCP (Model Context Protocol) servers for connecting AI systems to enterprise data sources and workflows.
Safe Swiss Cloud offers paid support packages with 24/7 coverage. For details, please visit our Support Services page.
Safe Swiss Cloud is ISO 27001, ISO 27017, and ISO 27018 certified and audited annually. This ensures that an Information Security Management System (ISMS) is in place, that the necessary standards for protecting Personally Identifiable Information (PII) are met, and that additional security and privacy measures for cloud environments are implemented.
Safe Swiss Cloud also complies with a range of industry-specific standards, including FINMA and BaFin (finance), HIPAA and FMH (healthcare), EU GDPR and Swiss DSG (data protection), as well as C5 and NIS2.
Large Language Models are accessed via the industry-standard OpenAI API. Interfaces to enterprise data are based on the Model Context Protocol (MCP) standard. Together, these ensure a very high degree of interoperability between systems, making it straightforward to switch models or providers.
Like all AI service providers — including the major international public cloud providers — Safe Swiss Cloud does not guarantee specific performance levels for AI workloads. However, a large pool of high-performance GPUs and dynamic capacity management have been implemented to ensure strong performance under normal operating conditions.
Safe Swiss Cloud is certified safe & compliant
Certificates
ISO 27001
Information Security Managment
ISO 27017
Code of practice for information security controls based on ISO/IEC 27002 for cloud services
ISO 27018
Code of practice for protection of Personally Identifiable Information (PII) in public clouds acting as PII processors
100% renewable electricity
TÜV SÜD Standards CMS 89 Accounting: 100% renewable electricity
Security, privacy, data protection and compliance
GDPR
General Data Protection Regulation of the European Union
DSG
Swiss Data Protection Act for the Protection of Personal Data
FINMA RS 2018/3
Outsourcing for banks according to the Swiss Financial Market Supervisory Authority (FINMA)
BAFIN/BAIT
Circular of the German Federal Financial Supervisory Authority
DORA
European Digital Operational Resilience Act for the Financial Sector
FMH
FMH recommendations for doctors on the DSG
HIPAA
Health Insurance Portability and Accountability Act
GxP
Good Clinical, Laboratory, and Manufacturing Practices
C5
Cloud Computing Compliance Criteria Catalogue of the German Federal Office for IT Security
NIS2
Network and Information Security Directive 2 of the European Union


