Sovereign AI is artificial intelligence whose complete data path — model inference, vector storage, document archive, backups and logs — runs under a single, chosen jurisdiction. For Swiss organisations that jurisdiction is Switzerland: data protected by Swiss law, processed in Swiss datacenters, by providers that no foreign authority can compel.
Why “hosted in an EU/CH region” is not sovereignty
The location of a server is not the location of legal control. Under the US CLOUD Act, US-incorporated providers can be ordered to hand over data they control regardless of where the server stands — a Zurich region operated by a US hyperscaler is still within reach of US legal process. Genuine sovereignty therefore requires both: Swiss infrastructure and Swiss-controlled operators throughout the stack.
Who needs it
- Banks and insurers under banking secrecy (Art. 47 BankA) and FINMA outsourcing circulars.
- Lawyers, notaries and doctors under professional secrecy (Art. 321 Swiss Criminal Code).
- Public administrations, bound by procurement law, cantonal data-protection acts and political accountability.
- Any company whose contracts, designs or research constitute competitive substance it does not wish to expose to foreign jurisdictions.
The Swiss sovereign AI stack, concretely
Sovereign AI in Switzerland is practical today: Swiss AI providers serve open-weight language models and embeddings from Swiss datacenters; Swiss clouds provide compute and object storage in Geneva and Zurich; and per-customer encryption (AES-256-GCM) ensures even the platform operator cannot read customer content. SovraRAG is built exactly this way — zero US-incorporated services anywhere in the data path.
Vendor checklist: six questions to ask
- Where does inference run — not just storage?
- Is every subprocessor in the data path incorporated outside US jurisdiction?
- Is customer data encrypted with per-customer keys before storage, and who holds the master key?
- Where do backups and logs live, and for how long?
- Can the operator technically read customer content (“operator-blind” or not)?
- Is there a complete audit and query log for compliance review?
If a vendor cannot answer all six in writing, the offering is cloud AI with a Swiss flag — not sovereign AI.