Where your data lives in a Swiss AI workspace

• Chats, files and disks

  They are stored on the server in Seon (Aargau). Pausing a workspace keeps its disk until you delete it yourself.

• Sign-in

  Sign-in runs through ZeroLog’s own sign-in service, Keycloak, on the operator’s servers in Switzerland.

• Featherless and Global DPA Annex III providers (USA, Singapore and other countries without a location guarantee)

  Model inference and possible provider-internal fallback. Your prompts and the files or images you attach go here to produce a reply. This is the core of the service.

• Stripe (Ireland and USA)

  Payment processing.

• Cloudflare (USA; edge location nearest you)

  Reaching the site, DDoS protection.

• IONOS SE (Germany)

  Outbound network gateway for containers.

• SMTP2GO (New Zealand company; sending locations depend on provider routing)

  Delivery of system emails.

• Google (USA)

  Only if you connect Gmail, Google Drive or Google Calendar. Sign-in does not run through Google.

• Infomaniak (Switzerland)

  Image generation, only when you request an image.

• Anthropic (USA)

  Automated, redacted error reports. They have no field for an account or user ID. The redaction is pattern matching and can miss an unusual form, so a personal fragment can remain in rare cases.

If you sign Claude Code or Codex in with your own account, those prompts go to Anthropic or OpenAI under your contract with them. The full list is on the trust page and in the privacy policy.

Featherless confirmed in writing on 28 September 2026 that it does not store the content of prompts or completions, keeps only metadata for abuse monitoring and error handling, and does not train on your content. That is the provider’s commitment. ZeroLog cannot inspect its systems and cannot enforce or check it per request.

On 29 September 2026 Featherless confirmed that its Global DPA applies automatically to the Developer API account. ZeroLog uses the Developer plan without a location guarantee.

For transfers from Switzerland the operator relies on the exception for contract performance, for the model service you ask for. The privacy policy itself calls regular, systematic reliance on this exception legally uncertain and disputed. EU standard clauses (module 2) cover transfers from the EEA and the UK. No Swiss addendum has been agreed. In the operator’s check of 25 September 2026, Featherless was not on the list of the Swiss-US Data Privacy Framework, so ZeroLog does not claim that safeguard.

This page is not legal advice. ZeroLog gives no legal guarantee that your use meets Swiss data protection law. For a binding assessment, ask a lawyer. The authoritative text is the privacy policy.

• Three states

  An answer was produced with zero data retention enforced, promised in general by the provider, or not guaranteed. The chat shows which one applies. For Featherless the state is the provider’s promise, not something ZeroLog enforces.

• Chats with vault credentials

  If you attach saved credentials to a chat, it runs only on a route with a confirmed zero-data-retention commitment. If none is available, ZeroLog refuses the request and sends nothing. It does not move the chat to another provider by itself. You can allow an exception manually for one chat; the chat then shows that the override is active, and you can revoke it.

• What the vault does not cover

  Credentials that are part of a prompt still reach the model provider of that chat, because the model needs them to act. The vault protects them while they are stored.

Each workspace is its own container and is not shared with any other user. Containers run on gVisor, a userspace kernel, and a machine without gVisor does not start workspaces at all. For untrusted code you can pick the VM class, which gives the workspace its own small kernel; it is part of the Ultra plan. Every workspace exports as Dockerfile and compose file. Details: Isolation, Containers.

Then do not send it to a model through ZeroLog. The container and its disk stay in Switzerland, but any prompt that contains code goes to the model provider. You can work in the container without the AI and run your own tools there. You can also sign in to your own Claude or Codex account inside the container; those prompts then go to that vendor under your own contract.

ZeroLog is run by one person as a sole proprietorship in Switzerland and is self-hosted. The service is in a closed preview. Legal details are in the imprint, linked from every page.

• Does my data stay in Switzerland?

  Chats, files and container disks do: they are stored in Seon (Aargau). The model request goes to Featherless in the USA, and each answer shows its retention status.

• Does Featherless keep my prompts?

  Featherless confirmed in writing on 28 September 2026 that it does not store the content of prompts or completions and does not train on it. It keeps metadata for abuse monitoring. That is the provider’s commitment, and ZeroLog cannot verify it per request.

• Does this meet Swiss data protection law?

  ZeroLog gives no legal assessment and this page is not legal advice. The operator relies on the contract-performance exception for transfers from Switzerland and states openly that the legal position is uncertain. Details are in the privacy policy.

• Swiss AI workspace

  Chat with many models and a Linux container in one account.

• Cloud development environment in Switzerland

  Where your files, your container and the model calls live.

• Trust and security

  Operator, architecture, recipients and limits.

• Isolation

  How workspaces are kept apart.

• Legal & privacy

  Imprint, privacy policy and terms.

• Pricing

  Plans and what each includes.