01
The law is the spec
Every routing rule traces to an article, a recital or a supervisory authority's guidance. If we cannot cite it, we do not ship it as a policy pack default.
Company / Est. 2025, Chennai
We build the answer to “where does the prompt go?”
YTT Secunet is a sovereign AI inference gateway. We route every request to an endpoint inside the right legal jurisdiction, enforce policy as code, and hand regulators a signed receipt proving it.
- Legal name
- YTT SECUNET PRIVATE LIMITED
- Incorporation
- Private limited company, India, 2026
- CIN
- U46599TN2026PTC198461
- Registered office
- Plot No. 1611-B G1 Reuben, Ram Nagar South 6th Cross, Madipakkam, Kanchipuram, Saidapet, Tamil Nadu 600091, India
- EMEA office
- Frankfurt am Main, Germany
- Control plane
- Frankfurt primary, Paris standby
- Assurance
- SOC 2 Type II, ISO 27001, ISO 27701
Three AI launches, one stalled question.
Before YTT Secunet, Vikram Desai built edge routing for a global CDN. Through 2024 he and Baljit Singh watched the same pattern repeat across European AI deals: the product team ships an assistant in a sprint, the enterprise buyer's DPO sends a questionnaire, and the deal stops on one line: which jurisdiction processes the prompt, and how will you prove it?
The honest answer was usually “a US region of a US-headquartered provider, most of the time.” After the CJEU's Schrems II judgment (Case C-311/18, 16 July 2020), that answer triggers a Chapter V transfer analysis, a transfer impact assessment under EDPB Recommendations 01/2020, and a debate about supplementary measures that procurement teams cannot close in a quarter.
They started YTT Secunet in Chennai in 2025 to remove the question from the critical path: a gateway that decides the jurisdiction before the request leaves, denies anything that would cross a border the policy forbids, and signs a receipt for every response.
- 2026
- Incorporated in Tamil Nadu, India; team building since 2025
- 11
- Regional gateways across EU, UK, CH, GCC, APAC and US
- 8
- Pre-built Rego policy packs maintained by policy engineering
- < 8 ms
- p99 added gateway latency
- YTT Secunet production telemetry, 2026
Operating principles
Six rules we design against.
They decide arguments in design reviews. When two conflict, the one higher on this page wins.
02
Proof over promises
A DPA auditor should never have to trust our word. Receipts are signed, chained into hourly Merkle roots and verifiable offline.
03
Nothing stored, nothing to disclose
Prompts and completions stream through memory and are never written to disk. Zero retention is a design property, not a contract clause.
04
Compliance cannot cost latency
A gateway nobody can afford to put in the hot path protects nothing. We hold ourselves to under 8 ms p99 added latency.
05
Failover stays home
Resilience never overrides residency. A Frankfurt outage fails over to Amsterdam or Paris, and denies rather than crossing to Virginia.
06
Say where the line is
We are infrastructure, not counsel. We tell customers what a receipt proves, what it does not, and which assessments stay their responsibility.
Baljit Singh
Co-founder & CEO
Founded YTT Secunet to answer the question that stalls AI launches in European procurement: where does the prompt go, and how do you prove it?
Vikram Desai
Co-founder & CTO
Built edge routing and anycast systems at a global CDN. B.Tech, IIT Bombay. Owns the gateway data path and its sub-8 ms latency budget.
Meera Krishnan
Head of Policy Engineering
Former privacy counsel in Wipro's global DPO office. BA LLB, NLSIU Bengaluru; CIPP/E. Translates Chapter V, the AI Act and sector rules into Rego policy packs.
Rahul Sethi
Head of Cryptography
Applied cryptographer, M.Tech from IISc Bengaluru. Designed the Merkle receipt format and the offline verifier regulators can run without trusting YTT Secunet.
Kabir Malhotra
VP Sovereign Infrastructure
Ran data center interconnect programmes at Tata Communications across Europe and the Gulf. Owns the endpoint registry and in-jurisdiction failover.
Deepa Nair
Head of Security & Compliance
Led SOC 2 and ISO 27001 programmes at a Bengaluru fintech. NIT Calicut. Runs YTT Secunet's own audits, pen tests and subprocessor reviews.
Sanjay Kulkarni
VP Customer Engineering, EMEA
Based in Frankfurt. Previously solutions architect for regulated cloud migrations in German and Swiss banking.
Seat open
Your name could go here.
See careersDr. Katrin Vogel
Advisor, EU data protection
Former case handler at a German state data protection authority; now teaches information law in Hamburg.
Laurent Mercier
Advisor, AI Act and HDS
Paris-based privacy counsel to health and insurance groups on HDS hosting and AI Act readiness.
Dr. Hans-Peter Imhof
Advisor, Swiss banking IT risk
Former head of IT risk at a Zurich private bank; FINMA outsourcing and revFADP practice.
- Mar 2025
Founding team starts in Chennai
The founding team of five starts building the gateway in Chennai, Tamil Nadu.
- Jul 2025
EU control plane live in Frankfurt
Control plane goes live on EU-headquartered infrastructure in Frankfurt am Main, with a warm standby in Paris.
- Sep 2025
Receipt format v1 and first policy packs
Ed25519-signed JWS receipts and hourly SHA-256 Merkle roots ship alongside eu-gdpr-strict and uk-gdpr-idta.
- Nov 2025
Frankfurt customer engineering
EMEA customer engineering team forms in Frankfurt am Main under Sanjay Kulkarni.
- 2026
YTT SECUNET PRIVATE LIMITED incorporated
Private limited company incorporated in Tamil Nadu, India, CIN U46599TN2026PTC198461, with its registered office in Madipakkam.
- Feb 2026
SOC 2 Type II report issued
Independent auditor's report covering security, availability and confidentiality over a six-month observation window.
- Apr 2026
ISO/IEC 27001 and 27701 certified
Information security and privacy information management systems certified across the Chennai and Frankfurt sites.
- Jun 2026
Swiss and GCC zones open
CH-Zurich, GCC-Riyadh and GCC-Dubai data planes join with swiss-fadp-compliant, saudi-pdpl-sovereign and uae-pdpl-local packs.
- Aug 2026
Annex IV evidence exports
Compliance Reports adds EU AI Act Annex IV technical documentation evidence bundles built from the receipt ledger.
- Oct 2026
ytt-verify open-sourced
The offline verifier is published so auditors can check Merkle inclusion proofs without trusting YTT Secunet.
| Legal entity | YTT SECUNET PRIVATE LIMITED, a private limited company incorporated in India |
|---|---|
| Headquarters | Plot No. 1611-B G1 Reuben, Ram Nagar South 6th Cross, Madipakkam, Kanchipuram, Saidapet, Tamil Nadu 600091, India |
| EMEA customer engineering | Frankfurt am Main, Germany |
| Control plane | Frankfurt am Main (DE) primary, Paris (FR) standby, on EU-headquartered infrastructure |
| Main line | +91-44-4123-4343 |
| Toll-free support (India) | 1800-266-4343 |
| General enquiries | hello@yttsecunet.com |
| Data Protection Officer | dpo@yttsecunet.com |
| Security disclosures | security@yttsecunet.com |
| Legal notices | legal@yttsecunet.com |
- Zero data retention: prompts and completions are never written to disk or used for training.
- TLS 1.3 in transit; AES-256 at rest for receipts and configuration.
- SOC 2 Type II, ISO/IEC 27001 and ISO/IEC 27701.
- Customer-held signing keys in an HSM on Sovereign Dedicated.
- Subprocessor list and DPA published in the Trust Center.
+91-44-4123-4343
Careers
Policy engineers, cryptographers and SREs who read regulations.
6 open roles across Chennai and Frankfurt. Small teams, written design reviews, and a product whose correctness is checked by regulators.
Sovereign route ready
Stop risking 4% global turnover GDPR fines on AI inference.
Deploy sovereign, cryptographically proven AI routing in 15 minutes.