Skip to main content

Securing AI services without compromising data sovereignty

AUTONOMOUS SASE

Company

Open Systems AG

Industry

Autonomous SASE

Use Case

Self-hosted AI security for Open Systems’ own AI services

The Challenge

Open Systems is a Swiss provider of Autonomous SASE, founded in 1990 and part of Swiss Post since 2024, serving enterprise customers operating in more than 180 countries. As the company builds AI into its services, every message reaching those services has to be checked before it passes.

The problem: that check sits in the path of every message, and how it is built decides what it costs. Putting language models in front of the application to judge each message is one option, and an expensive one. Every message triggers additional model generations before a verdict comes back, so latency and per-message cost both scale with volume. For Open Systems, data sovereignty and its own security requirements outrank both: the protection layer had to run entirely on its own infrastructure, without sending sensitive data to third-party services. That rules out most of the market before performance is even discussed.

Open Systems set the bar accordingly: protection they can rely on, answers fast enough to go unnoticed, and everything on their own infrastructure.

MATVIS runs entirely on our own infrastructure, responds orders of magnitude faster than anything else we measured, and protects more reliably. We did not expect to get all three at once.

– Markus Ehrenmann, CTO, Open Systems

The Solution

Open Systems put the MATVIS AI Firewall head to head against every alternative in their own use case domain. MATVIS came out in front.

How It Works

MATVIS sits between users, applications and AI models and checks every request before it reaches the model. The rules live outside the AI, so they hold even when someone talks the model into ignoring its instructions. It runs inside the organization’s own environment, without sending sensitive data to third-party services.

Securing AI without using AI: MATVIS uses small, purpose-trained classification models. Every message receives a score in under a tenth of a second, and every verdict is reproducible, testable and auditable.

Adapts to the use case: Rather than applying one generic ruleset everywhere, the firewall fits the domain it protects, taking on the customer’s taxonomy and the language of their use case. Moving it to a different domain needs no change of architecture. In Open Systems’ testing, domain adaptation cut false alarms by 75%.

Key Results

#1

Detection Rate

The best detection rate of all systems in Open Systems’ testing.

30-285×

Faster

Measured against the alternatives tested. Security stops being the slowest thing in the path.

100%

Self-hosted
Runs entirely on Open Systems’ own infrastructure, without sending sensitive data to third-party services.

About Open Systems AG

Open Systems is a Swiss provider of Autonomous SASE, founded in 1990 and headquartered in Zurich. Part of Swiss Post since 2024, the company delivers AI-powered, human-backed and sovereign-by-design security and connectivity to enterprise customers operating in more than 180 countries.


Securing AI for your organization?

Every deployment is different. Let’s talk about yours.