About

Private AI for the regulated world.

CloudSitus is a single drop-in API for chat, embeddings, speech, OCR and vision — routed per region with a hard PHI gate, operated from Switzerland, and built so there is almost nothing to store in the first place.

Get started Compliance posture

11 routing regions · 3 PHI-live jurisdictions · 0 prompts stored

Our thesis

The model was never the hard part

For healthcare and other regulated teams, the obstacle to using AI has never been model quality. It is the question a regulator, customer or counsel asks next: where did the data go, who processed it, and can you prove it? Most AI APIs cannot answer that cleanly — they front a US endpoint, retain prompts for abuse-monitoring, and offer one global pool with no per-request control.

CloudSitus is built around that question. Every call is classified as PHI or general, pinned to a jurisdiction, and routed only to a provider whose contract we have verified for that data class and region. The proxy itself holds nothing — so the honest answer to “what do you store?” is “your account, your balance, and nothing you sent us.”

Principles

How we build

01 · Stateless

No tenant database

CloudSitus is a stateless proxy. No database holds tenant data — a separate database holds the public model catalogue only. There is no usage table and no prompt log. Auth is HMAC-signed self-contained tokens; the credit balance lives in Stripe; ephemeral state lives in Cloudflare Durable Objects. The less we store, the less there is to leak or subpoena.

02 · Resident

Region-resident by default

Routing picks the data-resident provider first for the region you pin — Infomaniak in Switzerland, Scaleway in the EU, Together in the US — and PHI fails over only to other PHI-eligible hosts in that jurisdiction. Regions without a resident provider are served by global clouds, which process globally. For PHI, residency is a routing guarantee, not a marketing claim.

03 · Verified

PHI-eligibility is verified, not assumed

A provider carries PHI only after its DPA/BAA is reviewed and recorded. Most providers are general-traffic only on purpose. We would rather refuse a request than route protected data to an unverified host.

04 · Compatible

OpenAI-compatible on purpose

Point your existing SDK at our base URL and keep your code. We don’t invent custom shapes where an OpenAI equivalent exists — region and PHI are just request headers.

05 · Honest

We ship before we claim

Every compliance badge maps to architecture we actually run or paperwork with a date. Staged routes are labelled staged. No feature on this site is aspirational.

06 · Independent

Independent of any one cloud

We are not a reseller for a single hyperscaler. The registry spans open-weight and frontier providers, and you can pin the one that fits your jurisdiction and budget.

Who it’s for

Built for the buyer who gets asked the hard questions

Healthcare & life sciences

Clinics, digital-health products and research teams that touch PHI and answer to HIPAA, nFADP or GDPR.

Builders & resellers

Teams shipping AI features under their own brand who need per-request residency and a clean cost header to mark up.

Compliance & security

The people who fill in the questionnaire — given named sub-processors, audit headers and a stateless posture they can defend.

Questions, partnership or press? hello@phi-cloud.com.

Ready when you are

Read the posture before you read the contract.

Everything about how CloudSitus routes, gates and bills is documented in the open. Prepaid credits from $10 — no subscription, no seats.

Get started See the sub-processors

Prepaid credits from $10 · No subscription · No data retained