[{"data":1,"prerenderedAt":341},["ShallowReactive",2],{"seite-\u002Fen\u002Fratgeber\u002Fschweizer-ki-kmu\u002F":3},{"id":4,"title":5,"body":6,"description":332,"extension":333,"meta":334,"navigation":335,"path":336,"robots":337,"seo":338,"stem":339,"__hash__":340},"seiten_en\u002Fratgeber\u002Fschweizer-ki-kmu.md","Swiss AI for SMEs: Apertus, Infomaniak and data protection",{"type":7,"value":8,"toc":321},"minimark",[9,13,17,22,27,38,47,50,54,57,98,101,105,108,134,137,141,150,153,157,166,169,172,249,253,262,265,269,302,315],[10,11,5],"h1",{"id":12},"swiss-ai-for-smes-apertus-infomaniak-and-data-protection",[14,15,16],"p",{},"Anyone in a Swiss business who wants to process documents, enquiries or reminders with a language model runs into\nthree questions: which model, with which provider, and am I even allowed to send the data there? Since September\n2025 there has been Apertus, an open model from Switzerland, and with Infomaniak a provider that runs it in its own\ndata centre. This guide explains what that means for an SME, and where the line to American providers runs. As of\n8 October 2026.",[18,19],"produkt-ablauf",{":schritte":20,"titel":21},"[{\"ort\":\"Mailbox or scanner\",\"text\":\"Document, enquiry or list of open items\"},{\"ort\":\"Model in Switzerland\",\"text\":\"Read, recognise fields, write the log\",\"eigen\":true},{\"ort\":\"Proposal\",\"text\":\"Draft with the recognised values\"},{\"ort\":\"bexio or myfactory\",\"text\":\"A person reviews and approves\"}]","Path of a document through AI processing: the document comes from the mailbox, a model in Switzerland reads it, a proposal with an audit log is created, and a person approves it in bexio or myfactory",[23,24,26],"h2",{"id":25},"what-apertus-is","What Apertus is",[14,28,29,30,37],{},"Apertus is the language model of the Swiss AI Initiative, developed by ETH Zurich, EPFL and the national computing\ncentre CSCS in Lugano, trained on the Alps supercomputer. According to the\n",[31,32,36],"a",{"href":33,"rel":34},"https:\u002F\u002Fethz.ch\u002Fen\u002Fnews-and-events\u002Feth-news\u002Fnews\u002F2025\u002F09\u002Fpress-release-apertus-a-fully-open-transparent-multilingual-language-model.html",[35],"nofollow","ETH press release",",\nthe first version came out on 2 September 2025 in two sizes with 8 and 70 billion parameters, trained on 15 trillion\ntokens in more than 1,000 languages, including Swiss German and Romansh. What sets it apart is not its size but its\nopenness: weights, training data, training code and intermediate checkpoints are published, under a licence that\nalso permits commercial use. The training data comes only from public sources and respects opt-out requests from\nwebsites, even retroactively.",[14,39,40,41,46],{},"On 24 July 2026, according to ",[31,42,45],{"href":43,"rel":44},"https:\u002F\u002Fwww.cscs.ch\u002Fscience\u002Fcomputer-science-hpc\u002F2026\u002Fapertus-15-building-the-next-generation-of-open-ai-infrastructure",[35],"CSCS",",\nApertus 1.5 followed: the models now understand images and audio, have an optional thinking mode, a context window\nfour times longer, and follow instructions and tool calls better. For an SME this means a scanned document can be\nhanded to the model as an image, without text recognition beforehand.",[14,48,49],{},"What Apertus is not: a rival to the largest American models. The developers say so themselves. For reading\ndocuments, mapping line items and writing texts in the national languages it is enough; for complex programming or\nlong chains of reasoning the large models are further ahead.",[23,51,53],{"id":52},"where-apertus-runs","Where Apertus runs",[14,55,56],{},"An open model is a file, not a service. Whoever wants to use it needs someone to run it:",[58,59,60,74,80,86,92],"ul",{},[61,62,63,67,68,73],"li",{},[64,65,66],"strong",{},"Infomaniak"," offers Apertus 1.5 70B through its ",[31,69,72],{"href":70,"rel":71},"https:\u002F\u002Fwww.infomaniak.com\u002Fen\u002Fhosting\u002Fai-services",[35],"AI Tools",",\nalongside models from Mistral, Qwen and Google, via an interface compatible with OpenAI.",[61,75,76,79],{},[64,77,78],{},"Swisscom"," provides Apertus to business customers through its Swiss AI Platform, according to the ETH release.",[61,81,82,85],{},[64,83,84],{},"Public AI"," runs a chat interface that lets you try the model without installing anything.",[61,87,88,91],{},[64,89,90],{},"Run it yourself:"," the 8B version runs on a powerful workstation, the 70B version needs a graphics card with a\nlot of memory or a server. Then not a byte leaves the building, but you carry operation and updates yourself.",[61,93,94,97],{},[64,95,96],{},"Universities"," get access through a CSCS service.",[14,99,100],{},"The Canton of Ticino translates government documents with its own Apertus service, according to CSCS, and the Basel\nnewsroom Bajour runs the model locally in its editorial office. These are the cases the model is made for: sensitive\ntexts that should not leave the country.",[23,102,104],{"id":103},"what-infomaniak-ai-tools-offers","What Infomaniak AI Tools offers",[14,106,107],{},"Infomaniak is a Geneva hosting company that runs its AI services in its own data centres in Switzerland. For an SME,\nfour properties matter, all according to the product page:",[58,109,110,116,122,128],{},[61,111,112,115],{},[64,113,114],{},"No retention:"," requests and responses are neither stored nor used to train the models or improve the services.",[61,117,118,121],{},[64,119,120],{},"Choice of models:"," alongside Apertus there are Mistral Small, Qwen, Gemma and other open models, some with image\ninput and context windows of 100,000 to 256,000 tokens. You pick the right model per task without switching\nprovider.",[61,123,124,127],{},[64,125,126],{},"Pay as you go:"," you pay per million tokens processed, separately for input and output, with no base fee; there\nis a starting credit. A page of a document thus costs less than a centime; the current price list is with the\nprovider.",[61,129,130,133],{},[64,131,132],{},"Further services:"," speech recognition with Whisper, embeddings for semantic search, image generation, function\ncalling and MCP to connect a model to your own application.",[14,135,136],{},"For the workflows in this guide (reading a document, turning an enquiry into a quote, writing a reminder text) this\nis the first choice: Swiss law, Swiss data centre, no retention, open models.",[23,138,140],{"id":139},"mistral-as-the-route-via-the-eu","Mistral as the route via the EU",[14,142,143,144,149],{},"If an open model is not enough, Mistral from Paris is the next step. Processing takes place in the EU according to\nits ",[31,145,148],{"href":146,"rel":147},"https:\u002F\u002Flegal.mistral.ai\u002Fterms\u002Fprivacy-policy",[35],"privacy policy","; inputs and outputs are kept for another 30 days\nafter the response for abuse monitoring, unless the \"Zero Data Retention\" option is activated, in which case they are\nnot. Data goes to providers outside the EU only in exceptional cases, and then with the standard contractual clauses\nof the European Commission. The EU is on the Federal Council's list of countries with adequate data protection; a\ntransfer there needs no additional safeguards.",[14,151,152],{},"Mistral also has its own model for text recognition from PDFs and images, which is faster and cheaper than a large\nlanguage model for stacks of documents.",[23,154,156],{"id":155},"when-a-us-provider-is-permissible","When a US provider is permissible",[14,158,159,160,165],{},"The models from Anthropic, OpenAI and Google are the strongest on the market, and they process data in the United\nStates. The Swiss Data Protection Act permits a transfer abroad without additional safeguards only to countries with\nadequate protection. According to its\n",[31,161,164],{"href":162,"rel":163},"https:\u002F\u002Fwww.admin.ch\u002Fgov\u002Fen\u002Fstart\u002Fdokumentation\u002Fmedienmitteilungen\u002Fbundesrat.msg-id-102054.html",[35],"press release of 14 August 2024",",\nthe Federal Council put the United States on that list, but only for companies certified under the Swiss-U.S. Data\nPrivacy Framework. The participant list at dataprivacyframework.gov shows whether a provider is certified. Anthropic\nrelies on standard contractual clauses in its privacy policy (as of October 2026) and does not mention the\nframework; anyone using a US provider therefore checks the list themselves before relying on certification.",[14,167,168],{},"Without certification, the route is standard contractual clauses (Art. 16 para. 2 FADP) plus a data processing\nagreement (Art. 9 FADP) in which the provider guarantees not to use the data for training. The business offerings of\nthe large US providers include such contracts. Added to that is the duty to inform the people concerned that their\ndata goes to the United States, for example in the business's privacy notice.",[14,170,171],{},"In short, and without being legal advice:",[173,174,175,194],"table",{},[176,177,178],"thead",{},[179,180,181,185,188,191],"tr",{},[182,183,184],"th",{},"Data",[182,186,187],{},"Infomaniak (CH)",[182,189,190],{},"Mistral (EU)",[182,192,193],{},"US provider",[195,196,197,211,223,236],"tbody",{},[179,198,199,203,206,208],{},[200,201,202],"td",{},"Supplier invoices, articles, prices",[200,204,205],{},"yes",[200,207,205],{},[200,209,210],{},"yes, with contract",[179,212,213,216,218,220],{},[200,214,215],{},"Customer addresses, enquiries, reminders",[200,217,205],{},[200,219,205],{},[200,221,222],{},"yes, with contract, standard clauses and notice",[179,224,225,228,231,233],{},[200,226,227],{},"Sensitive data (health, finances, religion)",[200,229,230],{},"yes, with consent or legal basis",[200,232,230],{},[200,234,235],{},"only after case-by-case review",[179,237,238,241,244,247],{},[200,239,240],{},"Data under professional secrecy (Art. 321 SCC)",[200,242,243],{},"only with a contract as auxiliary",[200,245,246],{},"to be avoided",[200,248,246],{},[23,250,252],{"id":251},"professional-secrecy-as-the-limit","Professional secrecy as the limit",[14,254,255,256,261],{},"Doctors, lawyers, auditors and their auxiliaries are subject to Art. 321 of the Swiss Criminal Code. The Federal\nData Protection and Information Commissioner writes on its page on the\n",[31,257,260],{"href":258,"rel":259},"https:\u002F\u002Fwww.edoeb.admin.ch\u002Fde\u002Fbekanntgabe-von-patientendaten",[35],"disclosure of patient data"," (in German) that IT service providers\ncount as auxiliaries, that for cloud services the patients' consent should be obtained as a precaution, and that\ncloud services abroad are to be avoided in any case, because foreign law does not always offer protection equivalent\nto Art. 321. For these professions a model in Switzerland is therefore not a matter of taste but the only option, and\neven there the provider must be bound by contract as an auxiliary.",[14,263,264],{},"For most SMEs this does not apply. A joinery, a trading company or an agency processes ordinary personal data:\nnames, addresses, orders. The Data Protection Act with a data processing agreement and data minimisation is enough,\nand the choice of provider is a matter of trust, price and performance.",[23,266,268],{"id":267},"decision-aid","Decision aid",[270,271,272,278,284,290,296],"ol",{},[61,273,274,277],{},[64,275,276],{},"Which data?"," Ordinary business data, sensitive data or professional secrecy. The higher the level, the closer\nthe processing stays.",[61,279,280,283],{},[64,281,282],{},"Which task?"," Reading documents, writing texts, mapping line items: an open model in Switzerland is enough. Long\nanalyses, programming, multi-step reasoning: EU or United States.",[61,285,286,289],{},[64,287,288],{},"Which contract?"," Always a data processing agreement; with US providers also standard contractual clauses or\ncertification, and a note in your own privacy notice.",[61,291,292,295],{},[64,293,294],{},"Only the fields needed:"," a model that is to read an invoice needs the invoice, not the customer file.",[61,297,298,301],{},[64,299,300],{},"A person approves:"," what the model produces is a proposal. Posting happens after review, with a log.",[14,303,304,305,309,310,314],{},"If you want to connect the model to bexio, the guide ",[31,306,308],{"href":307},"\u002Fen\u002Fratgeber\u002Fbexio-api-wordpress\u002F","Connect the bexio API to WordPress","\nexplains how the interface works. If you would rather not build the workflows yourself: on the page\n",[31,311,313],{"href":312},"\u002Fen\u002Fki-anschliessen\u002F","Connect AI to bexio and myfactory"," I describe three workflows with approval and audit log,\nprocessed in Switzerland.",[14,316,317],{},[31,318,320],{"href":319},"\u002Fen\u002Fratgeber\u002F","All guides",{"title":322,"searchDepth":323,"depth":323,"links":324},"",2,[325,326,327,328,329,330,331],{"id":25,"depth":323,"text":26},{"id":52,"depth":323,"text":53},{"id":103,"depth":323,"text":104},{"id":139,"depth":323,"text":140},{"id":155,"depth":323,"text":156},{"id":251,"depth":323,"text":252},{"id":267,"depth":323,"text":268},"Swiss AI for SMEs: what Apertus is, where it runs, what Infomaniak AI Tools offers, when Mistral is enough and when a US provider is permissible. As of October 2026.","md",{},true,"\u002Fratgeber\u002Fschweizer-ki-kmu",null,{"title":5,"description":332},"ratgeber\u002Fschweizer-ki-kmu","BPhiAxMs9SB_3UniYitEjA6PTenJoMzFaIqfssyQtzs",1791438654993]