Solo
One person who wants their own machine
Shared with your invite
- One dedicated GPU, single tenant
- Two model families resident at a time
- Personal key, one device
Nobody reads this but you.
Private language models on hardware that is yours alone, inside a mountain in Switzerland. Sealed with a key that is generated on your device and never leaves it.
The app opens in waves. Access is invite only.
- Key generation
- On device, at signup
- Private key custody
- Yours only
- Tenancy
- Single tenant GPU
- Plaintext at rest
- None
- Training on your data
- Never
The problem
Every prompt you have ever typedran on somebody else's computer.
Hosted models process your text on infrastructure you do not control. Retention windows change. Access can be granted to staff for debugging, safety review or abuse investigation. Legal requests arrive and are answered.
None of that requires bad intent. It is simply what happens when the machine belongs to someone else and the key belongs to them too.
So we gave you the key instead.
The key
One key. You hold it. We never do.
Example key fingerprint9F2C 4A71 D8E0 3B56
- 01
Your key is born on your device
At signup your client generates a keypair locally. The private half is written to your device and to nowhere else. We receive the public half and nothing more.
- 02
Everything is sealed before it leaves you
Prompts, files, context and responses are encrypted on your machine. What crosses the network is ciphertext addressed to your server alone.
- 03
It opens only inside your enclave
Your dedicated server decrypts in memory, runs inference, and re-seals the response. Nothing is written to disk in the clear. Nothing is shared with another tenant.
- 04
We hold the hardware, not the contents
We can power the machine down, replace a fan, and swap a failed drive. We cannot read your workload, and neither can anyone who compels us, because we were never given the half of the key that opens it.
The mountain
Granite. Meltwater. Swiss law.
The machines sit in an excavated hall under alpine rock. The mountain does the physical security, the cold does most of the cooling, and Swiss jurisdiction does the rest.
Under rock
Hardened alpine sites in Switzerland are a long standing practice, built into granite that predates every argument about data.
Swiss jurisdiction
Switzerland sits outside the EU and outside US jurisdiction, and its revised Federal Act on Data Protection took effect in September 2023.
Hydro power
Roughly 60 percent of Swiss electricity generation comes from hydro power, which is why the alpine cantons are where the cold machines go.
Alpine cooling
At altitude the ambient air is cold for most of the year, so free cooling carries the load that a chiller would carry elsewhere.
The models
Open weights from everywhere. Running only for you.
Every model we run is open weight, which means it can be read, audited and pinned to a version. You choose which ones live on your server, and you choose when they change. A model you did not approve does not appear overnight.
- USLlamaMetaUnited States
- FRMistralMistral AIFrance
- CNQwenAlibabaChina
- CNDeepSeekDeepSeekChina
- USGemmaGoogleUnited States
- CACommandCohereCanada
- USPhiMicrosoftUnited States
- AEFalconTIIUnited Arab Emirates
- CNGLMZhipu AIChina
- CNKimiMoonshot AIChina
Model families are shown by the organisation that published the weights. Availability per plan is confirmed with your invite.
The hardware
Rent the machine. Keep the key.
You are renting silicon in a cold room, not a seat on a shared cluster. What runs on it is yours, and what comes off it is sealed.
Studio
A small team under one key policy
Shared with your invite
- Multi GPU node, single tenant
- Model families of your choosing
- Team keys with per member revocation
- Shared context vault
Vault
Organisations that answer to a regulator
Shared with your invite
- Reserved rack inside the hall
- Bring your own weights
- Hardware security module for key custody
- Named engineer, Swiss contract
Access
The app is not open yet.
We are letting people in one wave at a time so that every server is provisioned and every key is issued properly. Tell us what you would run and we will come back to you when your wave opens.