We bring AI from pilot projects into controlled operations. Caprilytics combines strategy, engineering and governance – from a sound decision to a solution your company can own and continue to operate.
AI projects rarely fail on technology – they fail on strategy, integration and governance. We've built a model that tackles exactly these three points: products that solve them technically, and consulting that ensures the solution fits your company.
A use-case portfolio with clear ROI and a roadmap that fits the business strategy. Individual pilots become an AI programme with measurable impact – no pilot graveyard.
Integration with knowledge base, ITSM, ERP and line-of-business systems. AI that knows your own systems – and works inside the production business, not next to it.
Audit trail, configurable autonomy limits and a governance framework for EU AI Act and revDSG. Every AI action is traceable – production use even in regulated industries like banking, pharma or healthcare.
Botster is our product for company knowledge and controlled tasks. Explore use cases, capabilities, security and the demo on the product website.
We don't sell a tool and disappear. We accompany you from the first strategy discussion through to production – and build software the way we run it ourselves. We made the shift from conventional to AI-assisted development in-house before guiding clients through it. Cybersecurity isn't an add-on module, but baked into every step.
We accompany you in three phases – from decision to independent operation.
Which use cases carry weight, which risks count, what the roadmap looks like. Before you invest.
Architecture, integrations and governance that support production use, not just the pilot.
How your teams will develop, operate and work with AI going forward – so capability stays, not dependency.
Strategy.
Roadmap.
Governance.
AI strategy for executive boards that look beyond pilots.
Architecture.
Compliance.
Integration.
Consulting that ends in architecture decisions – not in slides.
Pipeline.
Skills.
Coaching.
AI-assisted development is in production at our place. We bring this head start to your teams – security by design included.
What sets us apart from the market – not as a marketing message, but as an operational principle, proven in every project.
By default, data stays in Switzerland: Swiss data centres, Swiss law. Where a frontier model (Claude, GPT, Gemini, Grok) makes the difference, we add it under control – with automatic PII masking before every outbound call. Full performance, controlled sovereignty.
Every AI action logged, every autonomy limit configurable. Audit trail down to the individual tool call, mapped to ISO 27001 Annex A, NIST CSF, revDSG, GDPR and EU AI Act – per product with risk classification. Audit readiness built in, not bolted on.
Botster as lead product, DocProzessor and Dokumentenarchiv as foundation – and a team that also runs both in production. Strategy, integration and engineering from one source: no black box, we accompany you through production and beyond go-live.
We claim nothing about security or compliance we cannot evidence. The points below are the verifiable artefacts – locations, sub-processors, procedures, audit trails. Each one is tied to concrete vendors, standards or documents.
EKT AG (data centre, Frauenfeld TG) and Infomaniak (cloud services, Geneva) – both Swiss vendors, Swiss law, no US cloud export.
Via Infomaniak we access the Swiss sovereign model Apertus as well as open-source LLMs (Mistral, Llama).
In standard operation, customer data stays in Switzerland. Commercial third-party models – Anthropic, OpenAI, Google, xAI – are only added upon approval and under control: with PII masking before every outbound call, complete logging and contractually governed data processing.
| Vendor | Function | Location | Legal basis |
|---|---|---|---|
| EKT AG | Hosting (data centre) | Frauenfeld TG | CH |
| Infomaniak SA | Cloud, LLM inference | Genf | CH |
| Anthropic PBC | LLM inference (on demand) | USA | SCC + DPF |
| OpenAI, Inc. | LLM inference (on demand) | USA | SCC + DPF |
| Google LLC | LLM inference (on demand) | USA | SCC + DPF |
| xAI Corp. | LLM inference (on demand) | USA | SCC |
Data protection roles, data flows, providers and required agreements are defined for each project. Our privacy policy covers this website.
We define permissions, data flows, access controls and operational responsibility with your team. The Botster website explains product security features and limits.
For each deployment, we agree which events, sources and decisions are logged. Access, exports and retention depend on purpose, contract and applicable requirements.
Risk classification depends on the specific use, the people affected and the role of the provider or deployer. We assess requirements and responsibilities for each project.
Botster’s security, logging and classification are described on the Botster trust page.
Caprilytics, founded in 2018, grown from two decades of Swiss IT practice – today with a clear focus: agentic AI that withstands an audit.
At home in the Swiss SME, with the architectural depth for the corporation. Young AI agencies have the methodology but lack the senior perspective. Established IT houses have the practice but rarely the modern AI architecture. We combine both – close to the SME to deliver pragmatically, and we know the processes and hurdles of regulated corporations.
We build software with AI, not just for AI. Our entire development process is laid out for AI-assisted engineering – planning, implementation, review, deployment. That lets us deliver, in small teams, the speed of larger software houses at higher code quality: every line goes through review and test before it goes live.
Framework-agnostic, specialised in Sovereign AI. We work with all common LLM and agent frameworks. Our focus is sovereign AI – which doesn't exclude other models but integrates them deliberately. Where we're really strong: handling agentic AI. Botster is the product where this expertise lives.
Much separates our clients – one thing unites them: the security of their data.
Caprilytics AG is a Swiss provider of agentic AI based in Lucerne. The company combines AI consulting, engineering and governance so that a prioritised use case becomes a securely integrated system that can be operated. Caprilytics supports Swiss companies from strategy through technical implementation to operations, further development and clear accountability.
Caprilytics offers AI consulting in Switzerland, architecture and integration services, and governance for AI systems in production. This includes use-case and risk assessment, AI roadmaps, data and system integration, security by design and enabling internal teams. With Botster, Caprilytics also runs its own product and brings practical operating experience into consulting and engineering projects.
Caprilytics is aimed especially at Swiss companies and organisations that want to use AI with sensitive data, existing business systems or regulatory requirements. These include regulated industries, public organisations and IT teams in mid-sized companies. What matters is not industry or company size alone, but the need for traceable architecture, controlled integration and accountable operations.
An AI project starts with a goal, a user group and a measurable use case – not with the choice of a model. Caprilytics assesses value, data, integrations and risks and turns them into a prioritised AI roadmap. For a pilot, scope, success criteria, responsibilities and exit conditions are set. Only after demonstrable results does the controlled expansion into production follow.
Caprilytics translates requirements from the Swiss FADP and the EU AI Act into technical and organisational measures: documented data flows, roles and permissions, controlled choice of models and subprocessors, logging, and defined approvals and responsibilities. Which obligations apply depends on the use case and the role of the company. The implementation supports compliance but does not replace individual legal advice.
Caprilytics' standard architecture keeps customer data on Swiss infrastructure. External models or further providers are only used as set out in the agreed configuration and are shown in data flows and subprocessor lists. This keeps data location, purpose and the parties involved verifiable. The specific processing is set out transparently before the project or in the contract.
As a Swiss point of contact, Caprilytics takes responsibility for the agreed architecture, engineering and operations services. Security is addressed from threat model and permissions to monitoring, updates and incident processes. Responsibilities between Caprilytics, the customer and the providers involved are documented before production use. This makes clear who runs the systems, approves changes and responds to incidents.
Botster is the agentic AI platform of Caprilytics AG. It connects approved company knowledge with tools and systems and carries out tasks within defined limits. Product capabilities, use cases, autonomy levels, technology and the demo are explained on botster.ch. Caprilytics.com, by contrast, describes the company, the consulting and the accountability behind the product.
Tell us about your project – whether it is fully formed or still an open question. We assess what can sensibly be implemented and what cannot. If you need an NDA, a short email is enough; we will send you a vetted template.
Request a Botster demo →
