Sovereign infrastructure with published assurance.
On-premise or air-gapped deployment inside your own estate, with escrowed source, published audit summaries and a documented exit plan.
- Deployment option
- Air-gap
- Source and key escrow
- Escrow
- Exit and data-return plan
- Documented
- Plan
- Unternehmen

Built for what
you are actually dealing with.
Public bodies must demonstrate sovereignty, procurement fairness and long-term operational continuity — not just security.
- Air-gap
- Deployment option
- Escrow
- Source and key escrow
- Documented
- Exit and data-return plan
What we usually
find on arrival.
Public bodies must demonstrate sovereignty, procurement fairness and long-term operational continuity — not just security.
Population scale · public accountability
On-premise or air-gapped deployment inside your own estate, with escrowed source, published audit summaries and a documented exit plan.
How this
actually runs.
A real timeline with named gates, not a marketing promise. Every stage has a written acceptance point before the next one starts.
Tender response
Full technical specification, references, financial standing, insurance certificates and escrow terms, prepared to WTO/GATT and cantonal requirements.
Proof of concept
A funded PoC in your own environment against your own requirements, with acceptance criteria agreed in writing beforehand.
Sovereign deployment
On-premise or air-gapped installation inside your estate, operated by your staff under a documented runbook, with our team on call.
Independent assurance
Dedicated annual penetration test by a firm you select, with the unredacted report going to you, not filtered through us.
The things you are
actually worried about.
- Source code escrow
- Source and key material lodged with a Swiss escrow agent, with release conditions written into the contract rather than left to goodwill.
- Exit obligations
- Data return format, timeline and transition assistance are contractual from day one. A public body should never be unable to leave a supplier.
- Air-gapped operation
- No external network path. Updates arrive on signed, verified physical media with a documented chain of custody and a rollback path.
- Procurement neutrality
- We respond to open tender on published terms. We do not seek sole-source designation and we do not price differently by buyer type.
Not quite
your situation?
Scope it against
your real numbers.
Send us your site count, record volume, existing systems and governance requirements. We come back with a written scope, a timeline and a price — or an honest reason why we are not the right fit.
Unternehmen — custom, tender-ready