Sovereignty and data residency

Swiss company, Swiss law

PromptOne is a Swiss company operating under Swiss law. This is the part that matters and the part that is most often missed: an order to hand over data follows the company, not the hardware. A foreign provider hosting in Switzerland is still reachable through its parent. Being a Swiss company is what puts your data outside that reach.

Where things run

• The platform and its database are hosted in Switzerland.
• The models the agents run on are open weight and hosted in Switzerland.
• Identity and single sign-on come from a Swiss provider.
• Document processing, transcription and search all run on infrastructure we operate, not on third-party services.

What leaves, and why

One thing does leave, and only because you asked for it: what a workflow sends to a system you connected. If a step files a document to your document store or sends a message to a channel, that data goes where you pointed it.

Those destinations are yours to choose and are listed in your connections, so the set of places your data can reach is always something you can enumerate and revoke.

The frameworks this is built for

The platform is designed to the controls required by ISO 27001, the Swiss Federal Act on Data Protection, FINMA guidance, the GDPR and the EU AI Act. Where a framework calls for certification, we say so when it is in hand rather than implying it.