About NativeAI
NativeAI builds the sovereign security layer between Swiss organizations and the AI they use. Owner-managed, developed in Switzerland, hosted on our own servers in Lausanne.
Recognition
Selected as one of ten Business & Finance semi-finalists in Switzerland's largest startup competition, from 451 submissions reviewed by 211 jurors. A joint initiative of ETH Zürich, EPFL, McKinsey and Innosuisse.
Nominated for the Spotlight Award for integrating Apertus, Switzerland's open-source LLM from ETH Zürich, EPFL and CSCS, into NativeAI Guard: sovereign AI governance on sovereign AI infrastructure.
After dossier review and a pitch before the jury, the Fondation pour l'innovation et la technologie (FIT) supports NativeAI with a FIT Digital Grant. FIT is the Vaud foundation that funds early-stage technology startups.
Admitted to and developed at zünder, one of Switzerland's leading startup accelerators, where the feedback confirmed the thesis: Swiss enterprises need a sovereign, purpose-built solution for AI security.
Admitted to La Forge, the EPFL Innovation Park incubator for early-stage companies with a connection to EPFL: a network of founders, access to investors and expertise, in the middle of the campus where founder Bernard A. Gütermann graduated.
The company
NativeAI is owner-managed: owned and run by its founders. No foreign parent company, no hyperscaler dependency, no investor with the power to move your data or our jurisdiction. The people who built NativeAI Guard are the people who answer for it.
A security layer is a trust decision: when you route your most sensitive AI traffic through NativeAI Guard, you are trusting a company whose ownership, engineering and infrastructure sit in the same place, under the same law.
Our team
Over ten years of experience building secure AI and cloud systems. Bernard designed and built the NativeAI Guard architecture: the browser extension, the policy engine and the proxy layer for agents. He writes or reviews every line of code before it is deployed. Deep expertise in the adversarial AI landscape (jailbreaks, prompt injection, XPIA) and in running the entire infrastructure in-house, with no external dependency.
Over eight years working inside large Swiss enterprises across finance, healthcare and the public sector, and knows their realities first-hand: stakeholder committees, procurement cycles, compliance sign-offs. Your counterpart from the first conversation to live operation, so a pilot phase fits your organization instead of working against it.
Former CISO of Baloise and former board member of the Swiss Financial Sector Cyber Security Centre (FS-CSC). He has sat on your side of the table, and makes sure NativeAI Guard holds up to a security review in the Swiss financial sector.
Deputy Chief Security Officer of SIX Group, which operates the infrastructure Swiss financial institutions trade and settle on. He reviews our security architecture and our roadmap against the standard a large regulated institution actually applies, and tells us where it would not hold up.
Co-founder of a Swiss cybersecurity circle where security and IT leaders of Swiss enterprises meet, and startup coach at the zünder accelerator. Those two vantage points give us a direct line to the market: candid feedback that shapes NativeAI Guard around what Swiss enterprises actually need, and a clear read on how to reach the right stakeholders in each organization.
Why we exist
Every organization is adopting AI. Almost none have controls for it. And for Swiss banks, clinics, insurers and public offices, the tools on offer come with a structural problem: they run on infrastructure governed by foreign law (US Cloud Act).
We built NativeAI Guard because sovereign AI governance needs sovereign infrastructure, the entire stack. That is a product decision no one can retrofit, and it is the reason we exist as a Swiss company rather than a Swiss branch office.
Where we work
NativeAI Sàrl is based at the EPFL Innovation Park in Lausanne, the deep-tech hub at the core of the EPFL campus.
The connection is real: co-founder Bernard A. Gütermann is an EPFL alumnus, and our servers run in a nearby datacenter in Lausanne. Being part of this ecosystem keeps us close to the engineers we hire, the researchers we learn from and the Swiss institutions we build for.
NativeAI Sàrl · EPFL Innovation Park · Bâtiment C · 1015 Lausanne · Switzerland
Common questions
ISO 27001 is in active preparation: the management system is built and running, and certification has not yet been awarded. We hold no SOC 2 Type II report today, and we will undergo the audit whenever a customer requires it as part of their own assurance process. If your vendor process needs the current state in writing, including the ISMS scope and the evidence behind it, we are happy to share it with you.
We cannot outspend a platform vendor, and we do not try to. What a platform vendor structurally cannot offer is digital sovereignty: servers, software and law entirely in Switzerland, outside the reach of the US Cloud Act. What you get instead is a partnership: the people who built the product sit in your security review, and more than one capability in NativeAI Guard exists because a Swiss security team asked for it. Policies, audit logs and deployment mode stay under your control, so the relationship holds because the work is right, not because lock-in forces it.
No. We do not require access to your internal systems, and support work does not create a route into them. Where a customer explicitly authorizes access for a specific agreed purpose, that authorization is in writing and limited in scope. Several of our customers made this a mandatory governance requirement before signing, and we would rather have it in the contract than leave it as a promise.
On our own servers in a datacenter in Lausanne. Not a hyperscaler region with a Swiss label, not a reseller arrangement: servers we own and operate, under Swiss law. That is exactly what puts the processing outside the reach of the US CLOUD Act, and it is the question customers in regulated sectors and international organizations usually ask.
Yes, and several customers plan exactly that. The same product runs in both deployment modes, with the same detection engine and the same policies. Moving is therefore an operational matter, not a migration to a different product. Starting on Swiss SaaS shortens the path to a solid result; moving to on-premises later is a decision you can take once the value is proven.
Four differentiators. Sovereignty: Purview runs on Microsoft infrastructure under US law; NativeAI Guard runs on our own Swiss servers, outside the reach of the US Cloud Act. Coverage: Purview protects the M365 perimeter; ChatGPT, Claude, Gemini and DeepL run outside it. Effort: no classification trees or labeling project; detection reads content semantically and starts with a working rule set per industry. Cost: a fixed price per user per month, not usage-based. On startup risk: a scope-limited pilot, an inline proxy you can simply switch off, and source code escrow on request.
A demo with NativeAI is a conversation with the founders and engineers, no sales team in between.