Skip to content
AEGRYN
Server racks in a data centre

Technology & Sovereignty

Your technology is an asset or a dependency. Measure which.

Architecture, technical debt, AI, hosting: the choices of the first three years weigh on the next ten. Aegryn steps in at the moments when they are decided.

What we observe

22% → 34%

Swiss SMEs using AI, 2024 to 2025

SECO, kmu.admin.ch

34%

have rules on the data entered into AI tools; 23% among companies with fewer than 10 employees

SECO, kmu.admin.ch

2 Aug 2026

AI Act transparency obligations (Article 50) applicable

Regulation (EU) 2024/1689

What this changes

The risk does not come from the tool, but from the absence of a rule around it.

What you get

01

Named dependencies, with a plan for each non-reversible component.

02

Technical debt that is quantified rather than felt.

03

AI usage rules your teams actually apply.

Six situations

Where you stand. How we step in.

01

« Our platform is slowing down our releases. »

Decision

Refactor, rebuild or replace.

Deliverable

Architecture audit, technical debt quantified by domain, twelve-month trajectory.

A few weeks

02

« Only one person understands the system. »

Decision

Document, duplicate or insource.

Deliverable

Dependency register (people, providers, licences) and reduction plan.

Short engagement

03

« Build, buy or partner? »

Decision

The right call, with the exit cost.

Deliverable

Weighted-criteria analysis, reversibility included.

Short engagement

04

« Our teams use AI without a framework. »

Decision

Authorised tools, admitted data, hosting.

Deliverable

Usage policy, inventory, tool arbitration.

Short engagement

05

« We no longer have a CTO. »

Decision

Interim, hire, or fractional leadership.

Deliverable

Interim technical leadership with documented handover.

Fractional engagement

06

« Where is our data, and who can access it? »

Decision

EU or Swiss hosting, reversibility clauses, exposure to extraterritorial laws.

Deliverable

Hosting review and reversibility plan.

Short engagement

Our services

  • 01Audit the architecture and the debt
  • 02Decide between build, buy and partner
  • 03Establish the register of critical dependencies
  • 04Govern the use of AI
  • 05Provide interim technical leadership
  • 06Prepare the technology asset for a third party’s scrutiny (investor, acquirer)

Our framework

The 90-Day Reversibility Test

For each critical component (host, vendor, provider, AI model, key developer), one question: if it disappears tomorrow, in how many days, at what cost and with what data loss does the service restart?

Reversible within a week

Alternative identified, exportable data, documented switchover.

Reversible within a month

Known alternative, migration to plan, limited functional dependency.

Reversible within 90 days

Replacement possible but costly: partial rebuild, renegotiation, hiring.

Non-reversible

No credible alternative to date. The component conditions service continuity.

Deliverable

Map of the ten most critical components and treatment plan for the non-reversible ones.

By size

SME · 10 to 50 M€

A stack built by accretion, a few developers, some providers. Priority: minimal documentation and reversibility of the three critical components.

Mid-cap · from 50 M€

Legacy information system, several vendors, an IT department. Priority: a modernisation trajectory arbitrated by the committee, and data governance across businesses.

By sector

Finance & Capital

Critical ICT third parties and cloud outsourcing (DORA); resilience architecture.

Health & Life Sciences

HDS hosting in France; separation of health data; AI in a medical device (Annex I, 2 August 2028).

Industry, Energy & Infrastructure

IT/OT, remote maintenance, ownership of industrial data.

Commerce, Services & Customer Experience

Unifying customer data across channels without depending on a single CRM; AI personalisation and GDPR.

Tech, Innovation & Public Sector

Audit before investment or sale; copyleft licences at the core of the product; hosting imposed by public procurement.

Typical scenario · illustrative

Software vendor for clinics, 18 M€ revenue, 14 developers including 6 contractors. A fund takes an interest in the company. Within four weeks: dependencies and debt mapped, three non-reversible components identified, six-month remediation plan costed. The CEO presents it to the fund before the fund discovers it alone.

What an AI tool will not do for you

A coding assistant produces code. It does not answer for the architecture choice, does not know what your hosting contract allows, and will not hold the CTO seat in front of your board.

Implement

Implementing what was decided, through to acceptance.

OUR CONVICTION

Three mission formats

Choose your format.

Depending on your horizon, resources and objective, we adapt the engagement format.

QUICK BUILD

4 to 8 weeks

An operational tool, fast.

To test a use case, automate a process, or fill a gap. Tight scope, fast delivery, full ownership. Examples: tracking dashboard, scoring tool, automated workflow, field mobile app, regulatory reporting.

BUILD TO LAST

Durable tool

A tool built to last.

Full ownership, documented architecture, code any team can take over. For systems that carry your business. Price locked at scoping.

BUILD TO OPERATE

Build + recurring maintenance

We build and we operate.

For organisations without an internal tech team. We deliver the tool and handle operations: maintenance, evolutions, security. One point of contact over the long term.

Software domains

The domains where we build for our clients.

We build only where the market offers no suitable solution, or where independence requires it. Six domains cover recurring business needs, with an AI layer, independence and integration into your existing information system.

01AI Agents

AI agents & business automation

Orchestration of complex workflows by business AI agents connectable to your systems: CRM, ERP, email, documents, APIs, databases. Automation of billing and customer service. Every agent is auditable, with human supervision and quality monitoring.

02AI Governance

Compliance, risk & AI governance

Compliance platform covering EU AI Act, GDPR, Swiss FADP, NIS2, DORA, ISO 27001: processing register, controls, evidence, audit trail. Supplier and third-party risk assessment: contracts, cyber, ESG, concentration, sanctions.

03Cybersecurity

Cybersecurity & digital identity

Cyber risk assessment, asset inventory, incident management, security evidence, compliance mapping. Business onboarding: KYC, KYB, identity verification, beneficial owners.

04Knowledge AI

Documents, contracts & knowledge

Turn your contracts, policies, invoices and documents into actionable knowledge. Risk identification, critical deadlines and priority actions. Subblink, an Aegryn proprietary solution.

05Decision Intelligence

Data, BI & decision intelligence

Causal analysis, scenario simulation, automated recommendations. The software answers: what happened, why, what will happen, what to do.

06Digital Twin

Digital twin of the organisation

Dynamic representation of your organisation: people, applications, processes, contracts, suppliers, data. Real-time answers on dependencies, costs and operational risks.

Sovereignty

Independence by Architecture.

In 2025, 52.7% of European enterprises used paid cloud services, 33% performed data analytics, 20% used AI (Eurostat, 2025). Independence is not a marketing label: it is a verifiable architectural property, applied within the sovereignty framework you choose. Data under Swiss or EU jurisdiction, 100% client IP, AI models deployable without flows to Cloud Act-subject infrastructure without your explicit consent.

Eurostat, ICT usage in enterprises survey 2025 ↗

Data & AI model localisation

Your data and AI models stay in Switzerland or the EU, on your infrastructure or with a certified hosting provider. No processing outside the jurisdiction without your explicit consent.

Ownership & export

100% client IP. Aegryn is never a co-owner of the code. Full export of code, data, models and documentation, at any time.

Zero Vendor Lock-in

Open source, open standards or vendor solutions deployed under European jurisdiction. You can change integrator at any time, without depending on Aegryn or any single vendor.

Auditability & Human Control

Every AI decision is traceable, explainable and reversible. A human validates critical decisions.

Open or sovereign technologies: PostgreSQL, Python, Node.js, Next.js/React, Docker; hosting with Infomaniak, Exoscale, OVHcloud; Mistral models. Integration possible with your existing systems (CRM, ERP, business APIs) and mobile tools (React Native). Non-European tools (OpenAI, Stripe, Cloudflare, etc.) are only used with your explicit consent, documented at scoping.

What very few others offer

Not an agency. One price, one scope, no surprises.

What agencies do.

  • Indicative quote, real invoice differs
  • Time & materials with no ceiling
  • Overruns billed as extras
  • Delivery without documentation
  • No commitment on the outcome

What Aegryn does.

  • Price locked at scoping

    Scoping 1 to 2 weeks included

  • Measurable milestones per sprint

    Signed specification document

  • Scope overrun absorbed by Aegryn

    Fixed fee signed after scoping

  • Full technical documentation included

    Amendment signed if scope changes

  • Formal acceptance at each milestone

    Formal sign-off at each milestone

Our process

From scoping to operations. One point of contact.

01

Scoping & arbitration

Need, scope, choice between buying, integrating or building, exit plan. Outcome: signed specification and price. Duration: 1 to 2 weeks, included in the price.

02

Architecture & design

Architecture, security by design, ownership rights transferred, hosted in Switzerland or the EU, initial documentation.

03

Delivery by sprints

Measurable milestones, code review, continuous documentation, formal sign-off at each milestone. Aegryn stack or client stack.

04

Deployment & adoption

Production rollout, data migration, team training, usage monitoring.

05

Operations & transfer

Corrective and evolutionary maintenance by Aegryn, monthly retainer or tickets, or handover to your teams or another integrator. No obligation to stay with us. Independent certification (CIFSO 5000) remains possible if you wish.

Have a project in mind?

Describe your idea, the functional scope and your constraints. We will respond with a feasibility assessment and an initial scoping within 2 business days.

Confidential scoping call

Thirty minutes with a named expert from our network, accountable for their scope. No commitment at this stage; terms follow the scoping call.

Audit your architecture

Newsletter · Built to Last

Market analysis, company lifecycles, lessons from the field. One letter, no prospecting.