When small teams

    achieve
    big things.

    Orientation for Swiss financial service providers · October 2026 editionAI with client data: what the cloud really offers

    Which AI solutions may wealth managers, trustees and other financial service providers use with real client data? This overview shows where the data is processed, how good the models are and what to watch out for. On-premise and air-gapped solutions are deliberately excluded.

    The essentials in brief

    01

    Purely Swiss is possible, with trade-offs

    Guaranteed processing in Switzerland is offered by Azure OpenAI in Switzerland North (up to GPT-5.1) and Swiss platforms running open models such as Kimi K3 or DeepSeek.

    02

    The frontier models run at most in the EU

    The latest GPT, Claude and Gemini models are available today with guarantees at best in EU data centres, not in Switzerland.

    03

    EU is defensible, but not automatic

    With a documented risk assessment, a clean contract and clear client information, EU processing is defensible. Responsibility stays with the institution.

    How to read the traffic light

    Green: Switzerland

    Processing and storage in Switzerland. Suitable for client data, provided contract and governance are in place.

    Yellow: EU/EFTA

    Processing in the EU. Defensible with risk assessment, contract and client information. Decide consciously and document it.

    Red: not for client data

    Processing in the US, global or unclear. Often still the best choice for research, marketing and anonymised content.

    All cloud options at a glance

    Filter by traffic-light colour. On a smartphone the table scrolls sideways.

    SolutionClient dataModelsData locationModel qualityEffortCostWhat to watch
    Azure OpenAI Switzerland (Standard)
    Microsoft Azure, Switzerland North region
    GreenGPT-4.1, GPT-4.1 mini, GPT-4o, Embeddings, Whisper
    Processing
    Switzerland
    Storage
    Switzerland
    Good, one generation behind the frontierMedium, integration by IT or partnerLow, per token, no base feeChoose the «Standard» deployment type, not «Global» or «Data Zone». Otherwise the data leaves Switzerland.
    Azure OpenAI Switzerland (Provisioned)
    Microsoft Azure, Switzerland North, reserved capacity
    GreenGPT-5.1, GPT-4.1, GPT-4o, GPT-4o mini, o3-mini
    Processing
    Switzerland
    Storage
    Switzerland
    Very good, strongest model with CH guaranteeMedium, integration by IT or partnerHigh, fixed monthly capacity costsWorth it with regular volume or when GPT-5.1 must run in Switzerland.
    Swiss AI platforms
    e.g. AIgent, Swisscom, Phoenix Technologies (kvant), Infomaniak
    GreenOpen models such as Kimi K3, DeepSeek, GLM, Apertus
    Processing
    Switzerland
    Storage
    Switzerland
    Good to very good, Kimi K3 close to the frontierLow, ready-made interface, some with agentsMedium, licence per user, sometimes plus usageSwiss providers, mostly without US ties. Check maturity, references, ISO 27001 and confidentiality clauses. Deliberately disable optional US models.
    AI in your industry software
    e.g. portfolio, CRM and KYC systems like Assetmax, WealthArc, KYC Spider
    Depends on providerUsually GPT or Claude in the background
    Processing
    Depends on provider
    Storage
    Depends on provider
    Good, tailored to the use caseLow, the system is already in useLow to medium, often as an add-on moduleThe easiest entry point. Ask in writing which model runs where and whether data leaves Switzerland.
    Microsoft 365 Copilot
    Microsoft, with EU Data Boundary
    YellowGPT models from OpenAI, operated by Microsoft
    Processing
    EU/EFTA
    Storage
    Switzerland (Data Location or ADR)
    Very good, strong in everyday office workLow, licence and configurationMedium, licence per user and monthDisable Flex Routing, keep Anthropic models switched off, review web search and clean up permissions so Copilot only finds what it should.
    Azure OpenAI Data Zone EU
    Microsoft Azure, resource in Switzerland North
    YellowLatest GPT generation, e.g. GPT-5.4 to GPT-6.1
    Processing
    EU member states (excluding Switzerland)
    Storage
    Switzerland
    Frontier, latest GPT modelsMedium, integration by IT or partnerLow, per tokenStrongest GPT models with an EU guarantee. For demanding tasks when the risk assessment permits EU processing.
    Claude via AWS Bedrock (EU)
    Amazon Web Services, EU regions
    YellowOpus 5 and Sonnet 5 in Ireland or Stockholm, Opus 5.5 and Sonnet 5.5 via EU inference
    Processing
    EU
    Storage
    No prompt storage by Bedrock
    Frontier, especially strong for text and analysisMedium to high, AWS account and development neededLow to medium, per tokenThe clean route to Claude with an EU guarantee. In the Zurich region Claude is only available with EU or global processing.
    Gemini via Google Vertex AI (EU)
    Google Cloud, EU regions
    YellowGemini models
    Processing
    EU
    Storage
    EU or Switzerland
    Frontier, strong with long documentsMedium to high, Google Cloud project and developmentLow to medium, per tokenThe Zurich region is only an endpoint; processing there is not guaranteed. Verify with Google or a partner before use.
    Claude directly from Anthropic
    Claude API, Team and Enterprise
    RedClaude Fable 5.1, Opus 5.5, Sonnet 5.5
    Processing
    US or global
    Storage
    US
    Frontier, newest Claude models firstLow, ready to useMedium, licence or per tokenCurrently not suitable for client data. Very good for marketing, research and anonymised content.
    Claude in Microsoft Foundry or Copilot
    Microsoft, operated on Anthropic infrastructure
    RedClaude models
    Processing
    Outside the EU Data Boundary
    Storage
    Not guaranteed
    Frontier, same as Claude directLow, switchable at a toggleMedium, in licence or per tokenIn Copilot this is off by default for EU/EFTA. Leave it off until Microsoft offers EU processing.
    Copilot with Flex Routing enabled
    Microsoft 365, setting available since April 2026
    RedGPT models
    Processing
    At peak load also US, Canada, Australia
    Storage
    Switzerland
    Very good, same as CopilotLow, a single settingMedium, licence per user and monthA single setting in the admin center («Do not allow flex routing») turns this into the yellow variant.
    Private AI accounts
    ChatGPT, Claude.ai, Gemini with a private or free account
    RedAll of them
    Processing
    Unclear, mostly US
    Storage
    US
    Frontier, which makes it so temptingNone, and that is exactly the problemLow, free or privately paidShadow AI: no contract, no control, sometimes training on your data. Prohibit by policy and offer an approved alternative.

    Note on the US CLOUD Act

    Microsoft, AWS and Google are US corporations and are subject to the US CLOUD Act, even with data centres in Switzerland or the EU. This residual risk belongs in every risk assessment.

    The best solutions: three proven setups

    Hardly any institution needs just one tool. What has proven itself is the combination of an everyday assistant and a secure interface for automations.

    Recommended for most SMEs

    Pragmatic: Copilot plus Azure Switzerland

    • M365 Copilot for emails, documents and meetings, with storage in Switzerland and Flex Routing disabled
    • Azure OpenAI Switzerland North for automations with sensitive client data, such as document review or reports
    • A clear policy: what may go into Copilot, what only goes through the Swiss pipeline
    When policy demands «Switzerland only»

    Strict: Swiss platform plus Azure Switzerland

    • A Swiss AI platform as the working surface for all employees
    • Azure OpenAI Switzerland North or Provisioned (GPT-5.1) for automations
    • External models in the platform selectively disabled per use case
    When quality matters above all

    High performance: frontier models in the EU

    • Azure OpenAI Data Zone EU or Claude via AWS Bedrock EU
    • Pseudonymise where possible before data reaches the model
    • Risk assessment, contract and client information with extra care

    What the supervisor expects

    FINMA supervisory notice 08/2024 applies the principle «same business, same risks, same rules». Technology does not release you from responsibility, not even when outsourcing to a cloud provider.

    • AI inventory: which applications, which data, which model, which data location
    • Risk assessment per application, including cross-border processing and the CLOUD Act
    • Policy for employees: approved tools, banned shadow AI, human oversight
    • Outsourcing contract under Art. 14 FINIG: confidentiality, audit rights, data location
    • Professional secrecy under Art. 69 FINIG and data protection under the DPA ensured
    • Client information in the T&Cs or privacy policy reviewed
    • Alignment with your supervisory organisation, such as AOOS, OSFIN or FINcontrol

    This overview does not replace legal advice. Model availability and regions change constantly; October 2026 edition. Verify details with the provider before use.

    Sources

    • FINMA: Supervisory notice 08/2024 on governance and risk management when using AI
    • Microsoft Learn: Model availability by region in Azure Foundry
    • Microsoft Learn: Deployment types (Global, Data Zone, Standard, Provisioned)
    • AWS: Model availability by region in Amazon Bedrock
    • Google Cloud: Data residency for generative AI

    We implement the recommended setup for you

    Taskstreams builds and operates exactly the Swiss pipeline from this overview: processing in Switzerland via Azure OpenAI Switzerland North, contract and governance included. You receive finished AI employees for your processes, from KYC dossiers to client reporting, instead of your own infrastructure project.

    • Processing and storage in Switzerland (Azure Switzerland North)
    • Outsourcing contract, policies and documentation for the supervisor included
    • Fixed-price pilot, then ongoing operations by us