Swiss hosting
Your site and your data sit in Infomaniak Tier III+ datacenters inside Switzerland, powered by 100% renewable energy.
Talk to Dimitriabout your Setup
Security & Infrastructure Data is unrefined gold.
Data is unrefined gold.
We protect yours.
Everything Alchemy builds is hosted in Swiss datacenters, under the world's best privacy laws. Alchemy Zürich offers compliant, sovereign Swiss AI, hosting and cybersecurity in collaboration with our blue and red team partners.
What we run
Infrastructure that's good for the climate, respects your privacy and never compromises on your integrity.
Certified infrastructure
Everything runs on ISO 27001 certified Infomaniak infrastructure, with ISO 9001, 14001 and 50001 behind it.
Swiss AI
Inference runs in the same Swiss datacenters. Context based, no training on your data, nothing passed to third parties.
Data protection
Built to meet Swiss data protection law and GDPR from the first line of code, so compliance is never a retrofit.
Alchemy Labs
Forms, analytics, commerce and calendar run on our own platform, inside the same Swiss perimeter as your website.
Ongoing care
We keep it patched, monitored and running. When something needs your attention, you hear it from us first.
Full Vertical Integration
We can take care of all your brand's digital needs.
Every touchpoint you own is a place your brand gets experienced. A place where someone leaves data. We believe integrity is part of good branding. Therefore we enable our brands to treat their clients with integrity.
The ground everything stands on. Infomaniak is an independent Swiss company controlled by its employees, with the majority of its voting rights held by a Swiss public benefit foundation and no foreign subsidiaries. That last detail is the one that matters: with no US entity in the structure, the CLOUD Act does not reach your data. Infomaniak designs, builds, operates and secures its own datacenters without outsourcing, and has never run a business model built on selling user data.
Infomaniak certifications and labels
The people who try to break in, so that nobody else can. CREST certified operators run penetration testing and full red team simulations against your organisation the way a real intruder would, covering social engineering, multi stage exploitation, lateral movement and physical entry. Engagements account for FINMA Circular 2023/1, and TIBER-CH tests are coordinated with an accredited threat intelligence provider.
Red Team Partners accreditations
ClaireChains The watch that never sleeps. ClaireChains brings an AI powered SIEM that automates the repetitive L1 and L2 triage work bottlenecking most security teams, plus Claire Core, a cybersecurity model exposed as an API for SOC and SOAR workflows. Every investigation leaves an auditable reasoning trail, so you can see why an alert was closed and not just that it was.
Capabilities
- AI powered SIEM
- L1 + L2 triage automation
- SOC and SOAR workflows
- Continuous monitoring
- Auditable reasoning
Intelligence layer 
Prima AI
Prima AI Gold sitting in a vault earns nothing. Prima is our own layer for putting your data to work: content, insight and automation, grounded in real data and citable sources. Inference runs in the same Swiss datacenters as everything else, context based, with no training on your data and nothing passed to third parties.
Capabilities
- Swiss inference
- Context based
- No training on your data
- No third party sharing
- Citable sources
Straight answers
The questions worth asking a studio.
Is Alchemy Zürich itself ISO 27001 certified?
No, and we will not imply otherwise. Our infrastructure partner Infomaniak holds ISO/IEC 27001:2022, ISO 9001:2015, ISO 14001:2015 and ISO 50001:2018, and everything we build runs on that infrastructure. A certificate belongs to the audited entity, so we name whose it is rather than borrowing it. Any studio showing you an ISO badge should be able to tell you the same thing.
Where exactly does my data live?
In Tier III+ datacenters inside Switzerland, operated by Infomaniak. Infomaniak designs, builds, runs and secures those datacenters itself, without outsourcing to foreign intermediaries, so your data is hosted and processed exclusively in Switzerland.
Can a foreign government compel access to my data?
Infomaniak is a Swiss company with no subsidiary or structure in the United States, so the US CLOUD Act does not apply to the entity holding your data. Your data sits under Swiss federal data protection law and the GDPR instead.
What happens to my data when you use AI on it?
Inference runs in the same Swiss datacenters as the rest of your stack. It is context based, nothing is used to train models, and nothing is passed to third parties. If a question needs a source, Prima cites one.
Do you actually test the security of what you build?
Yes, through Red Team Partners. CREST certified operators run penetration testing and full red team simulations, covering social engineering, multi stage exploitation, lateral movement and physical entry. Engagements account for FINMA Circular 2023/1, and TIBER-CH tests are coordinated with an accredited threat intelligence provider.
Who is watching while nobody is looking?
ClaireChains runs the defensive side: an AI powered SIEM that automates the repetitive L1 and L2 triage work, with continuous monitoring and an auditable reasoning trail behind every investigation, so you can see why an alert was closed and not just that it was.