Confidential AI readiness review
Advice on your own material. The review runs no benchmark and puts nothing live.
For institutions
For your vendor review
Where your data goes
Who you would contract with.
TAIA GmbH, Zurich, UID CHE-189.956.337. A founder-led company, founded in 2026. TAIA is not supervised by FINMA.
Where processing happens.
- TAIA Confidential Screening and TAIA Confidential Ask: Google Cloud in Switzerland (europe-west6, Zurich).
- Digital Advisor and Folio summaries: the passages are selected in Zurich. The short summary is written from TAIA's own text only, by Google Cloud Vertex AI in Germany (europe-west3, Frankfurt). What you type is not sent to Vertex AI.
- E-mail: Google Workspace. TAIA's e-mail is stored in Europe and may also be processed in the United States.
- Payments: Stripe. Its contracting entity is in Ireland, and it also processes data in the United States.
- The privacy notice gives the details.
What TAIA's own process reads.
- TAIA Confidential Screening: your browser encrypts the name, and TAIA compares it with the SECO, EU and OFAC lists without decrypting it. TAIA holds no key to the name.
- TAIA Confidential Ask: your question is decrypted inside a Google Cloud confidential computing node (AMD SEV), and TAIA's own process reads it there. Google operates the control plane and the machine's operating system and is a trusted part of this set-up. The limits are on the Ask page.
Who else is involved.
Google, as TAIA's processor, for hosting in Zurich (with backups in Zurich and the Ask node), for Digital Advisor and Folio summaries in Frankfurt (from TAIA's own text only) and for e-mail. Stripe for payments. The list is kept in one place, in the privacy notice.
Advisory work.
The readiness review needs no system access and no customer data. It is done by TAIA's founder.
Papers
| Paper | Status |
|---|---|
| Terms: TAIA Confidential Screening | Live, /screening/check/#terms |
| Terms: TAIA Confidential Ask | Live, /ask/#terms |
| Privacy notice | Live, /privacy/ |
| Service providers | /privacy/#service-providers |
| Data processing agreement (DPA) | On request, for agreements with institutions |
| Readiness review: scope and deliverables (one page) | On request. Fee on /advisory/ |
| Exit: what happens to your data | See below |
Exit
- TAIA Confidential Screening: TAIA keeps no names you check, so there is nothing to return. When a paid plan ends, TAIA blocks its access key. TAIA keeps the sale record for ten years from the end of the business year, as Swiss law requires, and deletes the other plan data, including your contact details, 12 months after the plan ends. The key's counting lines (no name, no address) expire at the latest 13 months after its last check; the entry point's address log is deleted after up to 30 days.
- TAIA Confidential Ask: TAIA keeps neither your questions nor the answers, so there is nothing to return. The one log line per question (no question text, no answer text, no network address) is deleted after up to 30 days. For the plan itself the same periods apply as for TAIA Confidential Screening: the sale record for ten years from the end of the business year, as Swiss law requires; the other plan data, including your contact details, deleted 12 months after the plan ends.
Where we stand
- TAIA GmbH was founded in 2026; its first service has been on sale since 31.10.2026.
- TAIA is not supervised by FINMA.
- No outside cryptography review has been made.
Questions
Will my auditor accept it?
Your auditor decides. The papers above show what TAIA processes, where, and what it keeps.