Built in Switzerland · For closed groups, not crowds

Modern AI for the work the world cannot see.

A private workspace where boards, deal teams, legal matters and other small trust-bound groups adopt modern AI without the trade-off. Hosted in Switzerland. Built so that no one outside your group — including our own staff — can see your data, even when the system is using it. For the work where the cost of a leak is measured in years.

Built in Zug · Hosted on Swiss-sovereign infrastructure

First built for our own family-office work. Now offered to a wider set of groups whose work shares the same shape: closed, sensitive, and worth getting right.

Every closed group of professionals — five directors on a board, a dozen people in a deal room, a legal team running a regulated matter — is now caught in the same bind. The consumer AI products are out of bounds: feeding privileged or material non-public information to a vendor whose terms permit training is not a defensible decision. The enterprise AI products are built for thousands of seats inside a single company, not for the small, cross-organisational, advisor-laden rooms where the actual decisions get made.

So most of these rooms do nothing. Members go back to their personal AI accounts on the side, and the work of the room continues to live where it has always lived — in inboxes, scattered files, and the heads of two or three people.

Meanwhile, what the room knows lives everywhere
and what it decided lives in no one place at all.

The trade-off being offered — capability or confidentiality, pick one — is not a real trade-off. It exists because nobody has built the alternative for groups of this shape.

We have.

Hosted in
Zurich & Geneva data centres
Governed by
Swiss Federal Data Protection Act (FADP)
Data residency
Never leaves Switzerland by default
Operated by
A Swiss team, accountable to Swiss law
And, going beyond
No one sees your data. Not even us. The infrastructure is built so that our own engineers cannot read your documents or your team's queries — not by policy, but by how the hardware is designed.

A short list of rooms we are built for.

Steward is shaped for groups where every member is trusted, every document is sensitive, and the work persists across years. If your room looks like one of the four below, the fit is likely. If it looks like something we have not yet listed, we want to hear about it — that prompt is at the bottom of this page.

01

Boards & secretariats

Listed companies, foundations, regulated entities, pension boards.

Shape
5–15 directors plus a small secretariat. Members rarely overlap with day-to-day staff. Materials cycle quarterly.
The work
Board books, minutes, resolutions, regulator filings, committee papers — and the long memory of how the board has actually decided things over time.
What hurts
Diligent and Boardvantage hold the documents but cannot reason over them. ChatGPT cannot be used for material non-public information.

What did the board actually decide on the dividend policy review of 2022, and what conditions did the audit committee attach?

Write to us about your board
02

Transaction & investment committees

M&A teams, deal rooms, IC, private equity, special situations.

Shape
A core team of 4–10 with a wider ring of advisors — counsel, accountants, bankers — who come and go by deal.
The work
Diligence files, IC memos, term sheets, integration plans, post-mortems. Cross-deal pattern recognition matters as much as the live deal.
What hurts
Each deal starts from a blank room. Lessons from the last three deals live in two people's heads. NDAs prevent any consumer AI use.

Across our last twelve diligences, where did revenue quality assumptions diverge from what we found in the first ninety days post-close?

Write to us about your deal team
03

Legal & matter teams

In-house legal, GC offices, outside counsel project rooms, regulatory teams.

Shape
A matter team formed for a specific case or workstream — internal and external counsel, often across firms and jurisdictions.
The work
Pleadings, contracts, opinions, regulator correspondence, e-discovery review. Privilege and confidentiality are not features — they are the floor.
What hurts
Discovery platforms answer search queries but not actual legal questions. Most AI tools' terms of service are incompatible with privilege.

What positions has opposing counsel taken on indemnification scope across the last four matters with this firm — and where have they conceded?

Write to us about your matter team
04

Executive & strategy committees

Excos, corporate development, transformation programmes, sensitive strategic work.

Shape
A small senior team plus rotating contributors. The work is too sensitive for the wider company and too open-ended for a deal room.
The work
Strategy papers, market scans, competitive reviews, restructuring options, board pre-reads. Threads run for years without ever becoming a single document.
What hurts
The thinking lives in calendars, decks, and side-channel chats. New members onboard without the institutional memory of why the last option was rejected.

When we last looked seriously at exiting the Iberian business in 2024, what assumptions did we make and which of them have changed?

Write to us about your committee

Five capabilities. One workspace, built to compound.

Each works on its own. Together they make Steward the medium your group's work happens in — not a tool you log into when you remember to.

01

Memory of the room

Ask anything that lives in your group's documents, decisions and prior conversations. Steward reads across your permitted corpus and answers with citations to the actual source — minutes, memos, term sheets, opinions, board packs, advisor correspondence. Your group's institutional knowledge becomes searchable, not just storable, and every answer can be promoted into the room's standing record.

02

General-purpose AI, in confidence

The everyday questions your members would otherwise put to ChatGPT or Claude — research, drafting, summarising, structuring — answered inside your sovereign workspace. Frontier model quality with the data protections your work requires. No queries leave the group by default. No conversation enters anyone's training set.

03

Agents that run on schedule

Steward can take on recurring work and run it for you. Compile the pre-read for every quarterly meeting from the prior period's documents. Pull every newly-filed document for an active matter and summarise the changes. Flag anything overdue from the last meeting's resolutions. Set the task once. The work happens, with audit trail, until you change your mind.

04

A knowledge graph that connects everything

Underneath every answer, a living map of your room: people, entities, matters, decisions, advisors, deadlines — linked by how they touch each other. The graph is what lets Steward navigate your records the way a long-serving secretary would, rather than searching them like a database. Visible in the workspace, exportable as your own folder of wiki pages — yours regardless of where your stack goes.

05
The platform layer

A foundation you can build on

Steward is the foundation, not the ceiling. Reporting dashboards, custom workflows for your particular committee, integrations with the systems of record you already run — anything you'll want to add over the next five years reads from the same sovereign substrate. Build it yourselves on the same files Steward has been gathering all along, or commission us to build it for you. Either way, no re-ingestion, no re-migration, no vendor lock-in at the foundation layer. The technology decision you make once, that makes every subsequent decision easier.

Most providers ask you to trust them. We have built Steward so you don't have to.

Where does my data live?
In Switzerland. In data centres in Zurich and Geneva, operated by a Swiss team, governed by Swiss law. It does not leave the country.
Can your staff read it?
No. The system is built so we cannot — even if we wanted to, even if we were ordered to. Your documents and your group's queries are unlocked only inside protected hardware that no one else, including our own engineers, has access to.
What if a court orders you to hand my data over?
We can hand over what we hold. We hold encrypted files we cannot decrypt. The Swiss courts that govern us are not subject to American or other foreign demands; the U.S. CLOUD Act does not reach Swiss-owned infrastructure.
Who holds the encryption keys?
You do. Your tenant administrator generates the keys, holds them, and can rotate or revoke them. We never receive a copy. This is the default, not a premium tier.
What happens when we want to leave?
You export everything — every document, every note, every audit log entry — as ordinary files in standard formats. No re-licensing. No vendor handover process. Walk away with what is yours.

Confidential computing. Used properly. Almost nowhere.

When we say no one outside your group can read your data — not us, not the infrastructure provider, not a court order to either of us — that claim has to rest on something more than policy. It rests on a category of infrastructure called confidential computing: memory that stays encrypted even while it is being processed, and hardware that attests to exactly what code is running before it agrees to unlock your data. Without it, "we cannot read your data" is a promise. With it, it is a property of the silicon.

01

What it requires

  • CPUs and GPUs with hardware memory-encryption (AMD SEV-SNP, Intel TDX, NVIDIA Confidential H100)
  • Cryptographic attestation that proves which code is running inside the encrypted boundary before any data is released to it
  • A key custody arrangement where neither the infrastructure operator nor the application vendor holds a copy of your decryption keys
02

Where it is offered in production

  • A small number of major cloud providers globally — perhaps four or five, no more
  • A much smaller number that combine it with Swiss data residency
  • A smaller number still that combine it with full Swiss legal jurisdiction — no US CLOUD Act exposure, no foreign-court reach into the data while it is being processed
03

What we use

  • An established Swiss cloud service provider that serves Swiss banks and government agencies under Swiss law
  • Production confidential computing across the inference and storage path — not a beta feature, not a roadmap item
  • Tenant-held keys, generated and rotated by your administrator. We never receive a copy. Neither does the infrastructure provider

This is the substrate underneath every promise this page makes. Without it, "no one but you can see your data" is something you have to trust. With it, it is something you can verify.

Three ways to begin. One foundation underneath them all.

Steward is sold to the room, not the company. We meet groups where they are — from a single committee piloting against a defined corpus, to a federation of related rooms sharing a single sovereign tenant. Pricing is per-seat with a tenant base; numbers come from a short scoping conversation rather than a configurator.

To begin

Single room

One closed group — a board, a committee, a deal team, a matter — with its own corpus and its own House Rules. Self-administered. Often the way an organisation tests Steward before extending it.

Typical: 5–20 seats, one tenant, contract by the year.

To extend

Federation of rooms

Several related rooms inside one organisation — board, exco, deal team, matter teams — each with its own permissions and its own House Rules, sharing a single sovereign tenant and a common knowledge graph where the organisation chooses to share.

Typical: 30–150 seats, one tenant, multi-year terms.

By arrangement

Dedicated infrastructure

For organisations whose posture or contracts require complete physical custody — government, defence, regulated infrastructure — Steward deployed on dedicated Swiss-sovereign infrastructure or, in some cases, on infrastructure of your own. Same product, deeper isolation.

Scoped per engagement.

A note about this page

We are still learning
which rooms recognise themselves here.

Steward began inside a Swiss family office, where the fit was unambiguous. As we extend to other closed groups, we are deliberately listening before we generalise. The four personas above are our hypotheses about which rooms share enough of the underlying shape to make Steward worth their consideration. We may be missing one — or describing one in language that does not match how the work feels from the inside.

If you are inside a room that the four cards above do not quite capture, we would value a few sentences from you about the shape of your work.

Tell us about a room we did not describe

We read each one personally. Replies within a few days.

Built first for the room we know best.

Steward was built inside ANA Wealth, a Swiss family office, for our own work. Family offices were the original room: small, trust-bound, document-heavy, advisor-laden, with decades of history that nobody had time to make searchable. The product still serves them — and a separate page describes that fit in detail.

Extending Steward beyond family offices is a deliberate move, not an afterthought. The substrate underneath — sovereign Swiss infrastructure, knowledge graph plus vector retrieval, House Rules per room — turned out to fit a wider class of work than the original use case. Boards, deal teams, legal matters, and strategy committees share the same shape: closed membership, sensitive material, multi-year continuity, and a need for AI that cannot be answered by either consumer or enterprise products as they stand.

We are extending carefully, with one director or general counsel at a time, because the rooms we serve are not the kind of rooms that tolerate being a beta market.