Ithildin builds and deploys the operating systems that run Switzerland's most consequential operations.
Each platform is independently licensable, but the design intent is one stack: shared ontology, shared deployment substrate, shared audit and classification semantics. The four platforms below address Defense, Enterprise, AI, and the delivery layer that makes the rest deployable inside classified networks.
The operating system for Swiss defense decision making. Ithildin Defense gives commanders, analysts, and operators a single integrated environment to fuse signals, plan operations, and execute decisions. Built for the tempo of modern conflict. Cleared for Swiss classification frameworks. Deployable in air-gapped Swiss bunkers.
Integrate
Fuse intelligence, sensor, command-and-control, and logistics data into a single ontology. NDP- and NDK-compatible. Schema-agnostic ingestion. Provenance preserved end to end.
Decide
Common operating picture across echelons. Object-level and link-level analysis. Mission planning, course-of-action comparison, target development, and tempo management — on one surface.
Execute
Decisions become operations. Actions written back to command-and-control systems. Full audit trail. Multimodal access control by classification, role, and purpose.
Fusing SIGINT, OSINT, and HUMINT into a shared analyst graph.
Drone telemetry correlated with NDK threat reports in real time.
Cyber-incident timeline reconstruction for Kommando Cyber.
Air-gap deployment · diagram
Caption · Air-gap deployment, Swiss-cleared engineers, no foreign supply chain.
Run Switzerland's critical operations as code. Ithildin Enterprise brings the ontology-driven operating system to Switzerland's railroads, energy operators, hospitals, banks, and manufacturers. Replace fragmented dashboards with integrated operations.
Data
Connect every system. ERP, MES, CRM, SCADA, sensor feeds, document stores. In-place, zero-copy, schema-agnostic.
Ontology
Map your operation to objects and actions. Trains, substations, patients, transactions, claims. The semantic layer that makes AI useful.
Applications
Build operational apps on the ontology. No separate analytics, ML, and app teams. One stack, one team, one source of truth.
Critical Infrastructure
Rail, energy, water, telecommunications. Operational visibility across distributed networks.
Financial Services
FINMA-regulated banks and insurers. AML/KYC graph, sanctions screening, market-abuse detection.
Healthcare
Cantonal hospital networks and university hospitals. Clinical operations on the ontology.
Manufacturing
Swiss precision industry and pharma. Production, quality, regulatory submissions integrated end-to-end.
Sovereign AI. On your network. Under your control. Ithildin AI runs LLMs and frontier models on customer-controlled infrastructure. No prompts leave your perimeter. No data leaves Switzerland. Full audit trails on every model decision.
Private
Deploy any model — open-weight or licensed — on customer-controlled hardware. Air-gap supported. No third-party telemetry.
Governed
Every prompt, every response, every model decision logged and auditable. Classification-aware. Purpose-bound access.
Operational
Models bound to ontology objects via Functions. Agents that act on the operational layer, not chat UIs that dead-end in a conversation.
Continuous delivery to bunkers. Ithildin Deploy is the autonomous software deployment system that puts updates into connected, disconnected, and air-gapped environments — safely, traceably, and on the cadence Swiss operations require.
Signed
Every release artefact signed by customer-controlled keys. Verification at every spoke. No release applies without an explicit policy match.
Declarative
Constraints describe the world that should exist. The system reconciles toward it. Rollback is the same primitive as roll-forward.
Auditable
Every applied change, every policy decision, every signature check is logged. Compliance reviews need no engineering escort.
Hub-and-spoke · disconnected
Caption · One release. Many environments. No exceptions.
The platform exists to be deployed against your data.
Five days, fixed scope, two PSP-cleared FDEs on site, working application by Friday.