Executive Summary 2026: The corporate website is no longer a static brochure. It is a channel for enquiries, knowledge and handover to people.
AI chat interfaces are part of that shift. Stronger models raise regulatory and geopolitical questions. Plugin integrations without a data-flow review are a risk for DACH companies, not a default.
Part I: Geopolitics of code and the 'Swiss Grade' review frame
Routing through infrastructure in the USA or China is not a detail. It can create compliance and contract questions. Whether data stays in Switzerland depends on hosting, contract, purpose and a documented data flow.
'Swiss Grade' criteria — not an automatic status
If sovereignty is the goal, servers, storage and network must be evidenced asset by asset. A Swiss location is an architecture choice, not a substitute for contract and logging.
The operator's Swiss registration alone does not determine possible foreign disclosure. Provider structure, contractual chain, control relationships, storage architecture and applicable jurisdiction must be examined. The US CLOUD Act is a statute on cross-border access to data held by US providers [1].
Models, prompts and deletion paths must be traceable. Users need to know which data goes where. For GlasBox that is a documented delivery standard, not a marketing phrase.
Part II: Hybrid Mode — separate reasoning from sensitive knowledge
The core tension is model quality versus privacy. Frontier models are hosted in different regions depending on the provider. Hybrid Mode separates sensitive content from external inference when the project is built and operated that way.
Data abstraction (DAL) as an optional pattern
A local pre-check can mark or remove PII — only if that module is active in the project.
Placeholders replace identifiers; originals stay in a project-defined store.
Only approved context is sent to the external model.
Answers are reassembled locally. Effectiveness depends on rules, tests and operations.
How GlasBox describes privacy and data flows
Part III: Speed and conversion
Extra latency can hurt conversion. How much depends on the page, the offer and the measurement setup. Proximity can help; it is not a blanket percentage.
Structure enquiries rather than replace menus
Users ask for services and prices. The assistant may only answer what approved content and the public price list allow.
An assistant can capture enquiries and prepare them for human handover. It does not replace a binding quote.
Part IV: Public entry prices
Public prices are fixed and limited: Short Check, SOURCE/01 Full and mandate. RAG has no public numeric price.
First alignment, one domain, limited scope. CHF 0.
Separately bookable in-depth audit with a documentation package. CHF 2'450 one-time.
Ongoing visibility work after the appropriate audit or baseline. From CHF 1'500 / month.
Internal company knowledge, FADP/nDSG-aware, project-specific. No public figure — scope and price are set in an introductory call.
Current public prices and next step
Part V: Conclusion
Agentic tools need a controlled review. Adoption must not skip documented data flows. GlasBox Studio reviews hybrid setups project by project; sensitive flows are limited when contract and architecture support that.
Kacper Ruta · owner of Ruta Group · GLASBOX Studio
Swiss Grade: an internal review framework, not a certificate
“Swiss Grade” is GlasBox’s term here for documented architecture and operational checks. It is neither a government label nor an independent certification. A Swiss hosting contract does not automatically establish where model inference, backups, telemetry and support access occur.
Example data-flow review: browser → GlasBox server → approved knowledge source → answer → browser. If an external model service is added, record that additional transfer explicitly. Placeholders can reduce identifiers, but free text may still identify someone indirectly. Test effectiveness with representative and difficult cases.
| Control | Evidence | Acceptance |
|---|---|---|
| Processing | Service, region and contract chain | Every recipient appears in the data map. |
| Access | Roles and test accounts | Unauthorised documents are not retrieved. |
| Logs | Content, retention and deletion run | No unknown permanent copy. |
| Failure | Fallback and human handover | The interface clearly reports an outage. |
Sources
US CLOUD Act — primary resources from the US Department of Justice
Review the infrastructure?
We review data flows and entry options. No prices beyond the public list.
Request Consultation