Ithildin builds and deploys the operating systems that run Switzerland's most consequential operations.
Fourteen platforms — six live, five in the pipeline, three coming soon. Each independently licensable, but designed as one stack: shared ontology, shared deployment substrate, shared audit and classification semantics. From link-analysis intelligence to supply chain optimization, built exclusively for Swiss sovereignty.
The operating system for Swiss defense decision making. Ithildin Defense gives commanders, analysts, and operators a single integrated environment to fuse signals, plan operations, and execute decisions. Built for the tempo of modern conflict. Cleared for Swiss classification frameworks. Deployable in air-gapped Swiss bunkers.
Integrate
Fuse intelligence, sensor, command-and-control, and logistics data into a single ontology. NDP- and NDK-compatible. Schema-agnostic ingestion. Provenance preserved end to end.
Decide
Common operating picture across echelons. Object-level and link-level analysis. Mission planning, course-of-action comparison, target development, and tempo management — on one surface.
Execute
Decisions become operations. Actions written back to command-and-control systems. Full audit trail. Multimodal access control by classification, role, and purpose.
Fusing SIGINT, OSINT, and HUMINT into a shared analyst graph.
Drone telemetry correlated with NDK threat reports in real time.
Cyber-incident timeline reconstruction for Kommando Cyber.
Air-gap deployment · diagram
Caption · Air-gap deployment, Swiss-cleared engineers, no foreign supply chain.
Run Switzerland's critical operations as code. Ithildin Enterprise brings the ontology-driven operating system to Switzerland's railroads, energy operators, hospitals, banks, and manufacturers. Replace fragmented dashboards with integrated operations.
Data
Connect every system. ERP, MES, CRM, SCADA, sensor feeds, document stores. In-place, zero-copy, schema-agnostic.
Ontology
Map your operation to objects and actions. Trains, substations, patients, transactions, claims. The semantic layer that makes AI useful.
Applications
Build operational apps on the ontology. No separate analytics, ML, and app teams. One stack, one team, one source of truth.
Critical Infrastructure
Rail, energy, water, telecommunications. Operational visibility across distributed networks.
Financial Services
FINMA-regulated banks and insurers. AML/KYC graph, sanctions screening, market-abuse detection.
Healthcare
Cantonal hospital networks and university hospitals. Clinical operations on the ontology.
Manufacturing
Swiss precision industry and pharma. Production, quality, regulatory submissions integrated end-to-end.
One sovereign AI. On your network. Inside every platform. Enigma runs open-weight and licensed models — including Switzerland's own Apertus — on Ithildin's sovereign compute. No prompts leave your perimeter, no data leaves Switzerland, and the same AI fabric powers every Ithildin product: Vanguard's analysis, Alpine's vision, Aquila's matching, Canvas, Argent and the rest. Full audit trails on every model decision.
Private
Any model — open-weight or licensed — on customer-controlled or Icarus sovereign hardware. Air-gap supported. No foreign publisher, no third-party telemetry. Data never leaves Switzerland.
Governed
Every prompt, response and model decision logged and auditable. Classification-aware, purpose-bound access, FADP by design.
Omnipresent
One OpenAI-compatible endpoint behind every platform — bound to ontology objects via Functions. Agents that act on your operational layer, not chat UIs that dead-end in a conversation.
Tactical edge vision and sensor fusion — on the sensors you own. Alpine runs Enigma's vision models on your cameras, WiFi and IoT feeds at the edge: object detection, behaviour and anomaly alerting, line-crossing and presence. Enhanced-vision AR overlays for your own operators run on the same fabric. Raw data stays on your premises; only aggregate events flow into the ontology. Private property only — no public-space capture, no facial recognition.
Detect
AI object and behaviour detection on the customer's own camera feeds — vehicles, people, anomalies, line-crossings — classified in real time at the edge.
Fuse
Correlate cameras with WiFi sensing, IoT telemetry, access logs and geospatial layers — and overlay it into AR enhanced vision for the operator on task. One unified picture.
Edge
On-premises inference on Enigma models, scheduled by Icarus, deployed via Fortress for air-gapped sites. Results pushed to the Vanguard graph; FADP processor posture by design.
New · WiFi Sensing — presence, motion & occupancy from ordinary WiFi, no cameras →
Continuous delivery to bunkers. Ithildin Deploy is the autonomous software deployment system that puts updates into connected, disconnected, and air-gapped environments — safely, traceably, and on the cadence Swiss operations require.
Signed
Every release artefact signed by customer-controlled keys. Verification at every spoke. No release applies without an explicit policy match.
Declarative
Constraints describe the world that should exist. The system reconciles toward it. Rollback is the same primitive as roll-forward.
Auditable
Every applied change, every policy decision, every signature check is logged. Compliance reviews need no engineering escort.
Hub-and-spoke · disconnected
Caption · One release. Many environments. No exceptions.
Build operational apps on your ontology — without code. Canvas is a low-code application builder that lets analysts and operators drag ontology data streams, Enigma AI modules, and visualization widgets into custom operational dashboards and internal portals.
Drag
Visual component palette. Ontology queries, AI agents, KPI cards, charts, maps, and data tables — drag into position.
Build
Compose multi-page applications with tab navigation, conditional layouts, and role-based visibility. No developers required.
Deploy
One-click deployment to tenant namespace. Applications inherit ontology RBAC, classification, and audit semantics automatically.
Swiss tax & compliance, automated. Argent models corporate tax across all 26 cantons and federal direct tax — with OECD Pillar Two (QDMTT), patent box, and R&D incentives built in — and runs a multi-entity finance manager on top. Indicative estimates, not tax advice.
Model
Federal direct tax plus cantonal and communal multipliers for every canton. Capital tax, participation relief, patent box, and R&D super-deduction.
Optimize
Compare effective rates across cantons, model the OECD Pillar Two top-up (QDMTT), and surface best-canton and pillar-3a structuring options.
Consolidate
A multi-entity finance manager: multi-currency positions converted to CHF, cashflow, and group structure — one view across the whole holding.
Your legacy systems, unified. Nexus bridges the gap between the Ithildin ontology and enterprise systems — SAP, Oracle, Abacus, Bexio. Automated data extraction pipelines transform siloed ERP data into live ontology entities.
Connect
Native connectors for SAP S/4HANA, Oracle, Abacus, Bexio, and any REST/GraphQL/SFTP source. Zero-copy where possible.
Transform
Schema mapping with type inference and Swiss locale handling. Real-time CDC pipelines with exactly-once delivery.
Sync
Bidirectional. Write ontology decisions back to source systems. Enigma agents trigger ERP workflows and close loops.
Compliance perimeter, managed. Shield lets Swiss enterprises deploy into Ithildin's nDSG, FINMA, and ISchV-certified infrastructure — inheriting our security posture without building their own.
Inherit
Deploy workloads into the certified perimeter. ISO 27001, ISchV, FINMA controls inherited automatically.
Monitor
Real-time compliance posture dashboard. Automated DPIA generation and data flow mapping against nDSG.
Audit
Self-service evidence portal for external auditors. Pre-packaged bundles for common regulatory frameworks.
Eyes above. Decisions below. Zenith integrates satellite imagery, drone feeds, and geospatial data into the ontology — enabling tactical situational awareness, border monitoring, and infrastructure inspection from a unified command interface.
Task
Direct integration with commercial satellite providers. Task imagery collection, receive, process — within the stack.
Map
Every ontology entity gets a spatial dimension. LV95/CH1903+ native. Interactive terrain with vector tile rendering.
Detect
Temporal change detection on satellite imagery. Construction, movement, environmental shifts — flagged automatically.
Production optimized. Supply chains secured. Forge applies ontology and AI to manufacturing and supply chain management — identifying bottlenecks, predicting disruptions, and optimizing throughput across multi-tier supplier networks.
Map
Multi-tier supplier network as ontology entities. Visualize dependencies, identify single points of failure, model disruption scenarios.
Optimize
Enigma agents analyze production data — bottlenecks, maintenance windows, scheduling. Constraint-based optimization with LLM reasoning.
Secure
Continuous supplier risk assessment. Financial health, geopolitical exposure, compliance, delivery performance — scored in real time.
The data center, distributed into Swiss homes. Hearth places sealed, silent, direct-liquid-cooled GPU nodes in new-build homes and apartments at build time — each one a node in Ithildin's sovereign compute fabric. The node's 60–65 °C cooling loop feeds the home's hot water (free, all year); a billing-accredited submeter reimburses the homeowner's electricity at their local tariff, plus credits and a monthly stipend. Target programme — first nodes in pilot.
Deploy
Sealed, silent direct-liquid GPU nodes installed at build time with partner homebuilders and property managers, plumbed to the hot-water tank and metered through the smart panel.
Aggregate
Orchestration fuses hundreds of residential nodes into one schedulable pool — sold as batch and inference capacity to cloud and AI customers in CHF, under SLA with Swiss data-sovereignty clauses, workloads sealed in confidential enclaves.
Return
Waste heat becomes the home's hot water — a free byproduct, not a heat-pump replacement. Homeowners are reimbursed for the node's power at their local tariff, plus credits and a stipend. Encrypted at rest and in transit, remotely managed.
Sovereign compute, powered by the sun, federated across the country. Icarus is the national sovereign-compute fabric: utility-scale solar and storage on brownfield and industrial sites feed clustered compute that reuses its waste heat and flexes the grid. One scheduler federates Icarus core sites, Hearth home nodes and Aquila edge inference into a single Swiss-soil pool. Owned hardware, no foreign parent, open weights — sovereignty by structure, not by label. Core sites on the roadmap; the scheduler runs today on Swiss GPU.
Power
Tracker-ready PV plus storage on brownfield and industrial land — sovereign energy that turns otherwise-near-worthless midday solar into compute revenue and stored heat, flexing the national grid.
Federate
One scheduling plane unites Icarus core sites, Hearth residential nodes and Aquila edge inference — placing each workload where power, latency and confidentiality fit best.
Contain
Compute stays on Swiss soil under FADP and ISchV. Confidential-compute enclaves seal every workload from us and from the homeowner whose node runs it. Nothing leaves the perimeter; every job is logged.
An autonomous aerial mesh that watches without watching. Aquila is a fleet of self-charging AI drones that dock at Hearth nodes and run their inference on Icarus, giving continuous coverage of the zones a customer owns or is lawfully authorised over. Everything is encrypted at the sensor; a frame is only ever decrypted when a lawful Vanguard watchlist factor matches it — the match itself is the key. Aquila detects and classifies; it never jams and never strikes. The customer owns the airspace authorisation and the sensors. Operated under FOCA SPECIFIC authorisation; coming soon.
Patrol
Self-charging drones dock and recharge at Hearth nodes, handing off coverage across authorised residential, industrial, political and border zones — flown by the customer under FOCA SPECIFIC authorisation, Remote-ID on, fully insured.
Seal
Every face, plate and object is encrypted on the drone before anything is transmitted. Raw imagery never lands in the clear. Passive detection and classification only — no jammers, no kinetic effectors. Swiss soil, FADP and ISchV by design.
Match-to-decrypt
Only a hit against a lawful, warrant-scoped Vanguard watchlist yields the key to decrypt and log that single record. Match-driven access means proportionate, auditable surveillance — never mass facial recognition of the public.
The platform exists to be deployed against your data.
Five days, fixed scope, two PSP-cleared FDEs on site, working application by Friday.