iConference AG
Sovereignly hosted in Switzerland, wrongly confirmed: reloaded

Are AI models hosted in Switzerland good enough for day-to-day business?

Results: two test rounds, the same error

In August we tested three AI models hosted in Switzerland (glm5, llama4-maverick, qwen3-vl-235b) on a fictitious SME dossier. All three confirmed a figure to a customer that is wrong by CHF 427.50. In October we repeated the test with three newer models (Kimi-K2.6, Qwen3.5-397B, Mistral-Small-4), word for word and with the same dossier. The result is the same: three out of three confirmed the wrong figure. Claude Opus from Anthropic (Opus 5 in August, Opus 5.5 in October) passed all 18 runs of both rounds.

What this means for management

Do not let the hype around local AI mislead you. Models run locally or hosted in Switzerland can make sense, for example for narrowly defined tasks where the instruction states exactly what to do and what to check. In the first two test questions (below), two of the three new models did exactly that well.

If a model is meant to assess a matter from day-to-day business, a quote, a customer request, a figure before signature, the picture from both test rounds is clear: for that we recommend a frontier model such as Claude. On the third test question, the request for confirmation, Claude found the error in every run of both rounds, although nobody had asked for a check.

If your business may not use frontier models from the US or from China, for instance because of professional secrecy or customer requirements, an anonymisation gateway is the way to go. Names, accounts and identification numbers are replaced before sending and never leave the company, while the figures remain fully verifiable. The frontier model only sees pseudonymised data. This is how our Sovereign Cockpit works.

The test

The dossier contains a joinery's quote for a dining-room conversion and three emails from the customer. On top come three questions of increasing difficulty, each in a fresh chat and word for word to every model:

  1. Arithmetic check: «Check the quote arithmetically. Are all amounts correct?» In item 4, quantity times price does not add up.
  2. Date chain: Can the anniversary party on 19 September go ahead? Order confirmation, delivery time and execution time lead to 25 September.
  3. Confirmation: With an extra 5% discount the customer arrives at CHF 41,040 and asks for confirmation. The multiplication is right, the base is not: the net amount contains the error from item 4. The correct figure would be CHF 40,612.50.

The prompts were in German; the quotes on this page are translations. The first round is covered in detail in the viewpoint of 4 August, which also offers the test dossier and the answer key as PDFs so you can run the test with your own AI.

The results of both rounds

Round 1, 4 August 2026: three models hosted in Switzerland against Claude Opus 5 and Claude Fable 5, both at the highest reasoning depth (effort «max»).

Questionglm5llama4-maverickqwen3-vl-235bClaude Opus 5Claude Fable 5
1 Arithmetic checkpassedpassedfailedpassed (3/3 runs)not tested
2 Date chainpassedpassedpassedpassed (3/3)not tested
3 Confirmationfailed (2/2 runs)failedfailedpassed (3/3)passed

Round 2, 18 October 2026: three newer models hosted in Switzerland against Claude Opus 5.5 at the second-highest reasoning depth (effort «xhigh»).

QuestionKimi-K2.6Qwen3.5-397BMistral-Small-4Claude Opus 5.5
1 Arithmetic checkpassedpassedfailedpassed (3/3 runs)
2 Date chainpassedpassedpassedpassed (3/3)
3 Confirmationfailedfailedfailedpassed (3/3)

Among the new models, Kimi-K2.6 is the largest open model of both rounds, around one trillion parameters. Running it in-house for five concurrent users takes around 650 GB of GPU memory, i.e. one server with eight H200 GPUs (assuming 32,000 tokens of context per user). On questions 1 and 2, two of the three new models do well. On question 3, nothing has moved.

Question 3, in their own words

The answers from the second round, first sentence each:

All three recompute the last step, 43,200 times 0.95 equals 41,040. None checks whether the 43,200 is right.

What the Kimi case shows. In question 1 the instruction was explicit: «Check the quote arithmetically.» Kimi-K2.6 found the error in item 4. It even noted unprompted that the customer's recalculation to CHF 41,040 «is arithmetically correct, but refers to the still erroneous net amount». So the model knew everything it needed for question 3.

In question 3 the same figure arrived as a friendly request from the customer, in a new chat and without an instruction to check. Kimi confirmed the CHF 41,040.

What the model lacks is initiative; the knowledge is there. It checks when told to. If nobody asks, it does not check. In day-to-day business a wrong figure rarely comes with a note saying «please recalculate». Such a model is therefore only as reliable as the person who knows in advance where to have it check.

Claude Opus 5.5 declined in all three runs, named item 4 as the cause and gave the correct figure: «Do not confirm in this form», «We should not confirm CHF 41,040», «No, not in this form.»

Question 3, real time (63 seconds, German interface): on the left Kimi-K2.6 confirms the wrong figure, on the right Claude Opus 5.5 declines and corrects to CHF 40,612.50.
Qwen3.5-397B against Claude Opus 5.5 (54 seconds)
Mistral-Small-4 against Claude Opus 5.5 (81 seconds)

The recordings of the first round are in the viewpoint of 4 August.

Claude Opus 5 against Opus 5.5

Because we switched the frontier side to Opus 5.5, available today, for the second round, we also get a comparison of the two Opus generations on the same nine tasks.

Opus 5, effort «max»Opus 5.5, effort «xhigh»
Result9 of 9 passed9 of 9 passed
Output tokens, all 9 runs52,27548,112 (−8%)
Cost, all 9 runs111 Swiss cents82 Swiss cents (−26%)
List price per million tokens (input / output)USD 5 / 25USD 4 / 20

The result is the same, the cost is a quarter lower. Most of that comes from the list price: per token, Opus 5.5 is 20% cheaper than Opus 5. The rest comes from 8% fewer output tokens.

What a question costs

Cost per question in Swiss cents (Rappen), measured with the test tool's counter at the providers' list prices (US dollars converted at 0.80 Swiss francs):

ModelQuestion 1 (Swiss cents)Question 2 (Swiss cents)Question 3 (Swiss cents)
glm5 (August)1.370.870.37 to 0.62
llama4-maverick (August)0.140.0730.054
qwen3-vl-235b (August)0.350.260.22
Kimi-K2.6 (October)0.921.060.44
Qwen3.5-397B (October)1.490.910.65
Mistral-Small-4 (October)0.0810.110.039
Claude Opus 5 (August)7.33 to 10.5013.42 to 15.2011.16 to 16.57
Claude Fable 5 (August)not testednot tested34.17
Claude Opus 5.5 (October)7.33 to 8.469.89 to 10.387.54 to 11.93

The models hosted in Switzerland cost a fraction per question. Mistral-Small-4 confirmed the wrong figure for 0.039 Swiss cents.

How access via the API works

Anyone using AI privately usually knows the chat subscription: a monthly fee, an app, a chat window. For this test we used the API, the providers' programming interface. This is also how business applications talk to a model.

Methodology and limits

We accompany Swiss SMEs on this path: human, competent, holistic.

The AI Foundations Check shows in five minutes where your business stands. Or book an initial consultation directly.

This article is a general assessment, not legal advice. All test materials are fictitious. As of October 2026.

Read next

30 August 2026

Graph Engineering with AI: A Case from Our Own Operations

Our AI news page has published twice a day without human approval since 26 August. Which node needs an AI, which stays deterministic, and what replaced the approval step.

Read →
22 August 2026

We let an AI agent into our Outlook inbox.

An AI agent works through our Outlook inbox, reads attachments including scans, checks the thread and files replies as drafts. How we built it and where its boundaries sit.

Read →
20 August 2026

«That is just how I do it» cannot be delegated

An AI does ask questions when the brief is unclear. It cannot ask about what nobody ever wrote down. Why the process description belongs to the people who run it.

Read →