Sovereignty

Sovereignty is a set of facts you can check: who runs the service, where the machines are, what is kept, for how long, and what leaves the country. This page lists them for AI Tokens, which is run by Daiko Lab SA.

Two parts that do not mix#

The platform is split in two.

• The control plane, in Switzerland, keeps the inventory of the machines, the catalogue of models and the zones. It never sees a customer: no accounts, no keys, no texts.
• The data plane of AI Tokens, in Switzerland, keeps everything that concerns you: accounts, keys, usage records, conversations, uploaded documents, copies of the database. The API you call is part of it.

The data plane downloads its configuration from the control plane every minute and works from its own copy, so a request never waits for the control plane. Once an hour it sends back numbers, and only numbers: for every hour, model, machine, endpoint and zone, the count of calls and errors, the tokens and the average time. No user, no key, no text, no IP address.

Where your requests go#

A zone is a group of machines in one country, with a declared owner. Every key has the zones it may use: by default, all the zones AI Tokens offers. They are all in Switzerland.

• A request for text, pictures or video goes only to machines in your key's zones, so it never leaves their countries.
• A transcription with whisper-1 runs on a transcription machine in your key's zones, where AI Tokens has one there. The cases that machine cannot take run in Switzerland, outside the zones: see the box below.
• If the chosen machine fails before the first token, the request moves to another machine, still inside your zones.
• If no machine is available there, the answer is 503 and names the zone. The request is never moved to another zone.

Your account data stay in Switzerland, and your requests are processed in Switzerland. More in Zones.

What is kept, and for how long#

"Encrypted" means encrypted by the application before it is written to the database, on top of whatever protects the disk. What you delete stays in the copies of the database until they rotate out, after 30 days.

Technical logs, that is errors with the IP address of the client, stay on the machines of AI Tokens in Switzerland, for as long as the privacy notice says.

Deleting#

• A document: its file, its pieces and its vectors are deleted at once.
• A knowledge base: in the dashboard. The files, pieces and vectors of all its documents are deleted at once, with it.
• A conversation: deleted at once, with all its messages.
• The account: in the dashboard, under Account. It is disabled at once, and for 30 days the deletion can be undone by writing to info@daikolab.ch. After 30 days conversations, knowledge bases with their files and vectors, keys, the request log and the usage records are deleted, and the account is anonymised.

What stays after the account is deleted: the invoices, and a record of the request — email address, time, IP address — kept as proof that the deletion was carried out, for as long as the privacy notice says.

How to check#

• X-Zona on every text answer — chat completions, completions and the Responses API — says where it was processed. In a stream the headers leave before a machine is chosen: if your key allows more than one zone, the header lists the possible ones. A transcription carries it when a machine in your zones transcribed it, and not when the server in Switzerland did. Pictures and video do not send it today: their usage records keep the zone.
• Usage records keep the zone and the site of every request. The dashboard does not show them yet: ask info@daikolab.ch for an extract.
• The catalogue lists the countries where every model runs: Models catalogue.
• Who else touches your data: Sub-processors.

Contract documents#

Which law governs the service, the data processing agreement and the security measures belong to the contract documents of AI Tokens: write to info@daikolab.ch. For the law that applies, see also nLPD and NIS2.