Built in Switzerland.
Hosted in Switzerland.
Delivered in Switzerland.

Applied work on customer data runs locally, on the deployment's own infrastructure. In sovereign mode nothing leaves it — including general knowledge queries. In Max Brain mode, knowledge questions that contain no customer data go to external model vendors; subprocessors are named per deployment. Where customer operations require it, deployments are entirely on customer premises with no outbound connectivity.

• Designed for FADP / revDSG
• Subprocessors named per deployment
• On-prem option · default
• Customer DPA on file

Ithildin is run by its founder, who delivers engagements hands-on and on site. Where your rules require personnel security screening for access to classified material, that requirement is agreed with you before the engagement starts. No subcontracting outside Switzerland.

• Founder-led delivery
• On-site, forward-deployed
• No offshore engineering
• Screening per your rules

Customer-managed on-prem, or Swiss-jurisdiction infrastructure. Never US hyperscalers for regulated workloads. Hosting providers are selected for Swiss legal domicile and Swiss operations.

• Infomaniak · Swiss-domiciled
• Exoscale · Swiss-domiciled
• Customer datacenter
• Air-gapped on-prem

Native support for Swiss classification levels under the Information Security Act (ISG). Markings propagate through the ontology — objects, properties, links, and actions all carry classification metadata. Purpose-based access controls enforce need-to-know.

• INTERN · routine
• VERTRAULICH · sensitive
• GEHEIM · classified
• Purpose-bound access

Ithildin does not currently hold formal security certifications, and we do not claim certifications we do not hold. Deployments are designed to support your own certification and compliance requirements.

• Certifications held · none
• No claims we cannot evidence
• Designed for your requirements
• On-prem · under your controls

Ithildin is built to run inside fully disconnected Swiss sites — including hardened bunker facilities. Updates are signed, packaged, and delivered over a one-way data diode by Ithildin Fortress. The site is never reachable from outside; the outside is never reachable from inside.

Every read, every write, every model invocation is written to an append-only audit log. Audit trails support customer compliance reviews, Federal Audit Office inquiries, and internal investigations without engineering intervention.

• Append-only audit log
• Per-object lineage
• Per-action attribution
• Tamper-evident chain

Software bill of materials published per release. No banned foreign components. No firmware from sanctioned jurisdictions. Customer-controlled signing keys for deployments.

• SBOM · per release
• Sanctions screening
• Customer-controlled keys
• No third-party telemetry