Every field is source-linked and dated.See the rubric behind the grades.

How we grade
Sovereign AI Registry
ExploreBlogGov accessCertsCountries

Footer

Sovereign AI Registry

The compliance registry for AI vendors. Data residency, training defaults, retention, subprocessors and EU AI Act posture — one row per vendor, product and deployment, every claim linked to its source.

Registry

  • Explore vendors
  • Deployment models
  • Categories
  • Countries

Compliance

  • Gov access exposure
  • EU AI Act roles
  • Certifications

Resources

  • FAQ
  • Methodology
Built with ShipMore·Build yours →

© 2026 Sovereign AI Registry. All rights reserved.

  1. Explore
  2. Swiss AI Platform
SA

Swiss AI Platform

Sovereignty grade B (73/100). Residency in an adequacy-covered country; no training on your data. Swisscom, Switzerland.

Category
sovereign-host
EU AI Act role
Deployer
Deployments
Hosted API
Certifications
ISO 27001
Government access exposure
No non-EU government access
Categories
Sovereign host
Countries
Switzerland

Details

Deployment
hosted
Hq Country
Switzerland
Hq City
Bern
Ownership
public
Founded
1998
Trust Center Url
www.swisscom.ch/en/about/governance/riskmanagement/iso-iec-managementsystem.html
Training Default
never
Residency Options
Switzerland only (Swisscom Swiss data centres)
Gov Access Exposure
none-eu
Eu Ai Act Role
deployer
Certs
ISO 27001
DPA available
yes
Retention Default
Not published as a specific window. Swisscom states all data is fully stored and processed in its Swiss data centres and that customers retain control over infrastructure, data and processes.
Retention Exceptions
The strongest first-party wording — several open-source models used unchanged, no company data used to train or improve base models — is published for the Swiss AI Assistant, the packaged product built on the platform, rather than for the platform API itself.
Subprocessors
Swisscom (Switzerland) Ltd — first-party Swiss data centres
Subprocessor Count
1
Transfer Mechanism
adequacy-decision
Eu Procurement Ready
conditional
Eu Procurement Reason
Every computation on Swiss infrastructure under Swiss law, operated by a company 51% owned by the Swiss Confederation, running open-source models unchanged with no company data used to train base models — no CLOUD Act, no PRC exposure, no foreign model vendor. For an EU buyer the caveat is jurisdictional rather than technical: Switzerland is a third country, so this rests on the Commission's adequacy decision rather than on staying inside the Union, and adequacy is revocable. For a Swiss buyer this is close to the ceiling.
Training Evidence Url
www.swisscom.ch/en/about/news/2026/02/18-swiss-ai-assistant.html
Training Claim Basis
stated
Training Confidence
medium
Residency Evidence Url
www.swisscom.ch/en/about/news/2026/02/18-swiss-ai-assistant.html
Residency Claim Basis
stated
Residency Confidence
high
Retention Evidence Url
www.swisscom.ch/en/b2bmag/data-driven-technologies/ai-use-cases-switzerland-aargau
Retention Claim Basis
inferred
Retention Confidence
low
Subprocessors Evidence Url
www.swisscom.ch/en/business/enterprise/themen/cloud/digitale-souveraenitaet-swiss-ai-platform.html
Subprocessors Claim Basis
inferred
Subprocessors Confidence
medium
Residency Class
eea-adequate-only
Portability / Exit Path
serves-open-models
Subprocessor Jurisdiction
eu-only
Underlying model providers
open-source language models operated unchanged by Swisscom
At a glance
Governance Grade
B
Governance Score
73
EC SOV-2 Legal & Jurisdictional (0-4)
3
EC SOV-3 Data & AI (0-4)
2
Website

Similar

Read AI · Sep 2026

RARead AI meeting assistant

Sovereignty grade F (24/100). No EU residency. Read AI, United States.

meeting-ai
Governance Grade
F
Fathom · Aug 2026

FAFathom AI notetaker

Sovereignty grade D (35/100). No EU residency. Fathom, United States.

meeting-ai
Governance Grade
D
Granola · Sep 2026

GAGranola AI notepad

Sovereignty grade D (30/100). No EU residency. Granola, United States.

meeting-ai
Governance Grade
D

More EU AI Act role

  • Deployer59
  • General-purpose AI (GPAI)10
  • provider9
  • GPAI with systemic risk5

More Deployments

  • Hosted API68
  • Self-hosted weights6
  • On-premise6
  • Private VPC2

More Certifications

  • SOC 2 Type II46
  • ISO 2700136
  • ISO 4200113
  • ISO 270177
  • ISO 277017
  • ISO 270186
  • HDS5
  • HIPAA4
  • CSA STAR4
  • C54
  • ISO 90013
  • PCI DSS3
  • FedRAMP High3
  • ISO 27001:20223
  • SOC 2 (type unverified)2
  • ISO 500012
  • BSI C52
  • SOC 32
  • FedRAMP2
  • GDPR2
  • CSA STAR Level 12

More Government access exposure

  • US CLOUD Act44
  • No non-EU government access27
  • Mixed jurisdiction9
  • PRC National Intelligence Law2

More Categories

  • Coding assistant15
  • meeting-ai13
  • Sovereign host13
  • Inference host13
  • SaaS-embedded11
  • Foundation model11
  • Cloud platform7

More Countries

  • United States45
  • Germany9
  • France7
  • Switzerland5
  • Singapore3
  • Israel2
  • United Kingdom2
  • China2
  • Netherlands2