Integration / Sovereign cloud
Swisscom, routed by jurisdiction.
Keep Swiss tenants' inference in Switzerland by routing to Swisscom's Swiss AI Platform managed inference endpoints, with YTT Secunet enforcing swiss-fadp-compliant policy and signing receipts.
Swisscom, Switzerland's largest telecommunications company and majority owned by the Swiss Confederation, offers the Swiss AI Platform for business customers. Swisscom describes managed inference endpoints in its Digital Marketplace that give access to AI models including Apertus, the open Swiss language model developed by EPFL, ETH Zurich and the Swiss National Supercomputing Centre (CSCS). Swisscom states that customer data stays in Switzerland and is not used for development by international technology companies, and that the platform runs on an NVIDIA SuperPOD system in Switzerland.
For Swiss banks, insurers and health providers the question is rarely whether a provider has an EU region; it is whether data leaves Switzerland at all, because FINMA outsourcing expectations, professional secrecy and the revised Federal Act on Data Protection (in force since 1 September 2023) shape the risk analysis. YTT Secunet's swiss-fadp-compliant pack can be set to Switzerland-only, in which case Swisscom endpoints and your own on-premises runtimes are the only allowed targets, and failover stays between Swiss facilities.
YTT Secunet connects to the managed inference endpoint and credential Swisscom provisions for your contract. Exact model catalogue, API format and commercial terms come from Swisscom, so confirm them with your Swisscom account team; YTT Secunet registers the endpoint as delivered and translates request formats where needed. Each call produces a receipt naming the Swiss facility, which is the evidence a FINMA-supervised institution's internal audit will ask to see.
| Region or deployment | Location | Jurisdiction |
|---|---|---|
| Swiss AI Platform managed inference | Swisscom data centres, Switzerland | CH / Switzerland |
| Self-hosted runtime on premises | Customer data centre, Zurich | CH / Switzerland |
- 01
Agree the Swiss AI Platform managed inference service with Swisscom and obtain the endpoint URL, credential and model list for your contract.
- 02
Register the endpoint in YTT Secunet with jurisdiction CH and the facility designation Swisscom gives you.
- 03
Configure the swiss-fadp-compliant pack in Switzerland-only mode and list the Swisscom endpoint and any on-premises runtimes as the only allowed targets.
- 04
Deploy the YTT Secunet data plane in Switzerland (Sovereign Dedicated or the CH data plane) so the gateway hop also stays in the country.
- 05
Point your SDK at your Swiss YTT Secunet base URL and confirm receipts show jurisdiction CH for every call.
endpoints:
- id: swisscom-sap-ch
provider: openai-compatible
upstream: https://<endpoint-issued-by-swisscom>/v1
jurisdiction: CH
facility: swisscom-ch
credentials: vault://swisscom/inference
- id: onprem-zrh-vllm
provider: openai-compatible
upstream: https://llm.bank.internal/v1
jurisdiction: CH
facility: zrh-dc1
routes:
- policy: swiss-fadp-compliant
mode: switzerland-only
primary: swisscom-sap-ch
failover: [onprem-zrh-vllm]- Switzerland-only mode rejects EU endpoints even though Switzerland and the EU recognise each other's data protection as adequate.
- PII guardrails detect Swiss identifiers such as AHV numbers alongside the default set before any call.
- Receipts are signed with a key held in the customer's HSM on Sovereign Dedicated, so a Swiss bank can verify them without relying on YTT Secunet keys.
Why not just use an EU region for Swiss data?
Switzerland recognises the EU as adequate, so EU processing is lawful under revFADP for many workloads. Banking secrecy, FINMA outsourcing expectations and client contracts often require Switzerland-only processing anyway. YTT Secunet supports both and records which applied.
Can YTT Secunet route to Apertus?
Where Swisscom offers it on your managed inference endpoint, yes. Because Apertus is open, you can also run it yourself on vLLM in a Swiss data centre and register that endpoint.
Where does the YTT Secunet gateway itself run for Swiss traffic?
On the CH data plane or, for Sovereign Dedicated, in your own Swiss data centre or VPC, so the gateway hop does not cross the border either.
Sovereign route ready
Stop risking 4% global turnover GDPR fines on AI inference.
Deploy sovereign, cryptographically proven AI routing in 15 minutes.