Private AI Infrastructure
Private AI for confidential archives.
ANULUM designs, builds, and maintains private AI systems for Swiss and Liechtenstein institutions — on‑premises, Swiss‑hosted, or fully air‑gapped. Your documents stay under your control. Answers come with sources.
Request a confidential architecture review How deployment works
The problem, stated quietly
Banks, family offices, trustees, law firms, and clinics hold decades of confidential material: correspondence, contracts, board packs, estate files, client records. Modern AI could make this archive answerable — but not at the price of placing it in uncontrolled external systems.
ANULUM builds the alternative: AI infrastructure that runs where you decide, indexes what you approve, answers with citations from your own documents, and writes an audit trail you can show to whoever holds you accountable.
What we deliver
Local or Swiss-hosted model serving
Language models run on your hardware or on dedicated Swiss infrastructure — never on shared external APIs by default.
Confidential document ingestion
Controlled intake of PDFs, office files, scans, and correspondence, with source hashing and sensitivity classes.
Source-grounded retrieval
Every answer cites the documents it came from. If the archive does not support an answer, the system says so.
Audit logs and version evidence
Prompts, responses, model versions, and index states are recorded — exportable for compliance review.
Evaluation before reliance
Groundedness, refusal behaviour, prompt-injection resistance, and access control are tested before your team relies on the system.
Operation and support
Patching, monitored backups, controlled model updates, and incident response under a defined support agreement.
Deployment on your terms
Four custody models, selected during the architecture review:
Air-gapped
No internet path at all. Offline updates. For the most sensitive archives.
On-premises
Runs in your building on your network, with controlled maintenance windows.
Swiss-hosted dedicated
Single-tenant hardware in a certified Swiss data centre when you cannot host it yourself.
Hybrid, policy-gated
Local by default; external models only for approved, non-sensitive tasks — with routing logs.
Who it is for
Family offices
Institutional memory across generations — without exposing the family archive.
Family offices →Trustees & fiduciaries
Source-grounded retrieval across trust deeds, registers, minutes, and client files.
Trustees & fiduciaries →Private banking
Controlled internal AI over policies, research, and regulated knowledge.
Private banking →Research & board offices
Private literature, strategy papers, and board material — searchable, citable, local.
Start with a review →How an engagement works
- Confidential architecture review1–2 weeks, fixed scope We map the archive, the risk boundary, the deployment mode, and the operating cost — before you buy anything.
- Proof node2–6 weeks A limited, sanitised part of the archive runs on real infrastructure. You see citations, refusals, and audit logs on your own material. Then you decide: stop, expand, or productionise.
- Production system and managed operation6–16 weeks, then ongoing Warrantied hardware, hardened deployment, user roles, backups, evaluation pack, training — and a support contract that keeps it dependable.
Dense systems produce heat. We design where it goes.
For larger GPU deployments, ANULUM can design liquid-cooling and heat-recovery paths so part of the thermal energy supports building heat or hot-water preheating — engineered with licensed HVAC partners, after a site survey, with measured assumptions.