Solution · Privacy
Data minimization as the default state
Data minimization as the default state: Zurich storage, EU processing, Swiss-hosted open-weight models, incognito turns, and write-only secrets.
monopea is an autonomous agent built on data minimization: persistent data is stored in Zurich, Switzerland and processed on EU infrastructure, Swiss-hosted open-weight models are selectable as your default track, incognito turns run with no durable writes, and secrets are write-only — the model never sees the values.
You are the person who reads the data-processing terms before the feature list, pays for email, and has so far concluded — correctly — that agentic AI is a privacy dumpster fire. The conclusion was right about the defaults, not about the category. This page is the mechanism list, so you can audit the claims instead of trusting the adjectives.
Why the default agent stack fails a privacy audit
A typical agent product is a maximal data funnel: every conversation retained indefinitely, credentials pasted into prompts and stored in context, inference routed to whichever foreign API is cheapest that week, and — as the 2026 exposed-instance incidents demonstrated — sometimes the whole thing reachable from the open internet without authentication. "We take your privacy seriously" is not a countermeasure to any of that.
The self-hosting reflex is honest but expensive: you become the patch cycle, the auth layer, and the audit function, and the OpenClaw CVE record shows how that goes at scale. The alternative worth auditing is a hosted agent whose privacy properties are structural — verifiable in how the system is built, not in how it promises to behave.
- Stored in Switzerland, processed in the EU — stated as exactly that, not inflated to "never leaves Switzerland"
- Swiss track: open-weight models (Qwen3.5, Mistral, Nemotron) hosted by Infomaniak in Switzerland
- Incognito turns: no durable writes on monopea’s side — local no-retention, on demand
The mechanisms, and what they let the agent do for you
The properties are architectural. Storage-at-rest — conversations, memory, knowledge, documents, encrypted secrets — lives in Zurich; the runtime processes on EU infrastructure. Model choice is enforced by routing: pick the Swiss track and inference runs on Swiss-hosted open-weight models, with no silent fallback to a foreign API. Secrets are write-only — envelope-encrypted, referenced as {{secret:NAME}}, substituted only at dispatch, scrubbed from tool results — so the model never sees a value. Incognito turns persist nothing, conversation threads can be deleted, and the audit trail is signed so even the log is tamper-evident.
Inside that envelope, it is a full autonomous agent: it plans against your goals, runs research and drafts documents and correspondence, works your connected tools through MCP, remembers what you have told it (except when you tell it not to), and schedules recurring runs. Outward actions wait as pending proposals by default — which for this audience is not friction, it is the point: an agent that acts on the world only when you have seen exactly what it is about to do.
Why it matters
Claims you can audit
Zurich storage, EU processing, Swiss-hosted models, write-only secrets, incognito turns — each is a mechanism you can verify, not a trust-us adjective.
Minimum necessary retention
Long-term memory when you want continuity, incognito when you want none, deletable threads throughout — retention is a per-turn choice, not a vendor default.
Open weights, sovereign hosting
The default Swiss track runs open-weight models hosted by Infomaniak in Switzerland — you can know what the model is and where it runs.
FAQ
Privacy-first operators, in short
- Does my data ever leave Switzerland?
- Storage-at-rest stays in Zurich, Switzerland; processing runs on EU infrastructure — so yes, processing crosses into the EU, and we say so rather than rounding up to "100% Swiss". On the Swiss model track, inference itself stays on Swiss-hosted models.
- Can I use it without building a permanent record?
- Yes. Incognito mode runs a turn with no durable writes on monopea’s side — no memory, no conversation history. It is local no-retention: our storage keeps nothing from that turn. Ordinary conversation threads can also be deleted.
- Which models process my prompts?
- The ones you choose, enforced by routing. The Swiss track runs open-weight models — Qwen3.5, Mistral, Nemotron — hosted by Infomaniak in Switzerland. Other models, including Claude, GPT, and Gemini, are selectable if you decide the trade is worth it.
- How are my API keys and passwords handled?
- The vault is write-only: PUT a secret and it can never be read back — the API returns only name, description, and last four characters. The agent references {{secret:NAME}}; the value is injected only at dispatch and scrubbed from results before they reach the model.
Keep exploring
Fiduciaries
An AI agent a Swiss fiduciary can defend to clients: stored in Zurich, processed in the EU, Swiss-hosted models available, every outward action gated and logged.
Indie founders
Autonomy for your ops — inbox, invoices, outreach, research — behind an approval gate, without running an exposed agent instance yourself.