Swiss AI API · zero data retention
Swiss-hosted AI decisions. Nothing you send is ever stored.
Laya Studio answers your questions on GPUs located in Switzerland, keeps its account database in Zurich, and never writes the content of a request to disk. Turn on Swiss-only mode and a request is only ever answered on GPUs in Switzerland, never by a failover abroad. On the way it is handled in memory by our Cloudflare API gateway at the edge location nearest the caller, which can be outside Switzerland and stores none of the content.
- GPUs in Switzerland
- Account data in Zurich
- Swiss-only mode
- 0 bytes of content stored
Journey of a request
There and back. Nothing written down.
Your text travels encrypted through Cloudflare’s edge to a GPU in Switzerland, is read in memory, answered, and discarded the moment the answer leaves.
- Encrypted in transit. TLS on every hop; the edge checks your key and stores no content.
- Answered in Switzerland. the x-laya-region header on every response says where it ran.
- Discarded after the answer. never written to a database, a log or a training set.
Swiss-only mode
A gate at the border, not a promise
One switch per workspace (or the x-laya-residency: ch header per request) and requests are only ever answered in Switzerland. If the Swiss pool is unavailable you get an error, never a silent detour abroad. Switching it on applies to keys already in use within about 5 seconds. It is an add-on: +15% credits per request, still below Jev.
- For the whole workspace. Dashboard → Settings → Data residency.
- Per request. send x-laya-residency: ch. A request can tighten residency, never loosen it.
- If the Swiss pool is down. HTTP 503 residency_unavailable, which you can retry.
Zero data retention
What stays, and for how long
Your content lives for one forward pass. Request metadata is kept for 30 days for billing and debugging. Daily totals stay so we can invoice you.
- Zero content retention. text and questions are discarded when the answer is returned.
- Minimal metadata, 30 days. time, status, number of questions, latency. No content.
- Your API key. stored only as a SHA-256 hash, in the Zurich database.
Where data lives
Two places, both in Switzerland
The GPU pool answers your questions and keeps nothing. The account database in Zurich keeps what we need to run your account, and no content.
- GPUs in Switzerland. Our primary inference pool runs on dedicated GPUs located in Switzerland. Every API response tells you where it was processed in the x-laya-region header.
- Account data in Zurich. Accounts, API keys (stored only as SHA-256 hashes), credit balances and usage metadata live in a Postgres database in the AWS Zurich region (eu-central-2).
- Encrypted end to end in transit. All traffic uses TLS. The API gateway runs on Cloudflare’s network, which forwards requests encrypted and does not store their content; the GPU servers accept requests only from our gateway.
The facts
Swiss hosted AI, in six plain facts
Where the GPUs are, what is kept, and what never is. Each item is the exact wording we stand behind.
01
GPUs in Switzerland
Our primary inference pool runs on dedicated GPUs located in Switzerland. Every API response tells you where it was processed in the x-laya-region header.
02
Swiss-only mode
One switch per workspace (or the x-laya-residency: ch header per request) and requests are only ever answered in Switzerland. If the Swiss pool is unavailable you get an error, never a silent detour abroad. Switching it on applies to keys already in use within about 5 seconds. It is an add-on: +15% credits per request, still below Jev.
03
Zero content retention
The text and questions you send are processed in memory and discarded when the answer is returned. They are never written to a database or log, and never used to train anything. One exception to know about: the optional chat agent (POST /v1/ask, the MCP ask tool, dashboard Chat) first passes your prompt to a third-party language model to plan the questions, in the US by default and in Switzerland under Swiss-only mode.
04
Account data in Zurich
Accounts, API keys (stored only as SHA-256 hashes), credit balances and usage metadata live in a Postgres database in the AWS Zurich region (eu-central-2).
05
Minimal metadata, 30 days
For billing and debugging we keep request metadata only — time, status, number of questions, latency — for 30 days. Daily totals are kept for invoicing.
06
Encrypted end to end in transit
All traffic uses TLS. The API gateway runs on Cloudflare’s network, which forwards requests encrypted and does not store their content; the GPU servers accept requests only from our gateway.
Medical & sensitive data
Built for sensitive data
No retention plus Swiss processing makes Laya Studio a fit for sensitive text such as patient messages, clinical intake notes, HR cases or financial correspondence — the kind of data that should not sit in a US AI provider’s logs.
This demo always runs in Switzerland and shows the region the answer came from. More ideas on the use-case pages.
For developers
Enforce Swiss-only processing in one switch or one header
Swiss-only mode can be set for a whole workspace or for a single request. A request can tighten residency, never loosen it.
For the whole workspace
Open Dashboard → Settings → Data residency and turn on Swiss-only. Every key in the workspace is then answered in Switzerland only.
Per request
Send the header
x-laya-residency: ch. If the Swiss pool is unavailable you get HTTP 503residency_unavailable, never a detour.Verify every response
Every response carries
x-laya-region(where it ran) andx-laya-residency(chorany). Log them, or assert on them.- Read the API docs →
nFADP & GDPR
nFADP, GDPR and your DPA: what we say, and what we don’t
Swiss data protection, stated carefully. We only claim what we can back up.
Frameworks
Designed to support compliance with the Swiss Federal Act on Data Protection (nFADP, in force since 1 September 2023) and the EU GDPR.
Data Processing Agreement
Our Data Processing Agreement (laya.studio/dpa) is part of the Terms and applies automatically when you send personal data; a signed copy is available on request: privacy@laya.studio.
Read the DPA →Please read
The caveat
You remain responsible for your legal basis to process personal and health data. Laya Studio holds no formal certification (such as ISO 27001) today and does not sign HIPAA BAAs.
Details in our privacy policy and on the security page. Proof per request: x-laya-region.
FAQ
Swiss data residency: common questions
Start with 6k free tokens, answered in Switzerland
Then $0.0357 per 1M input tokens — 15% below Jev. Create a key, turn on Swiss-only mode, and check the x-laya-region header on your first response.