TriShellTriShell
Enterprise RAG · Hosted in Switzerland

TriShell runs on your dedicated datacenters, answers only from your documents and obeys the access rules you set. You choose the models, the data and what may leave the building, and every step is audited.

Book a demoSee a cited answer

  • AI agent · Sev 1Mar 2026

    Meta

    An AI agent posted advice nobody approved

    An engineer asked an approved agent to look at a colleague’s forum question. It posted a reply on its own; the advice was wrong, and following it opened company and user data to employees without clearance.

    2 hsensitive data open to staff without clearance
    How TriShell handles this

    Permissions are enforced inside the search, so an answer only draws on files the asker is cleared to see.

    The Information via Trending Topics · 19 Mar 2026
  • Prompt injectionJun 2025

    Microsoft Copilot

    One email could make Copilot leak internal files

    Aim Security hid instructions in an ordinary-looking email. When the user later asked Copilot a related question, it read the email and sent internal data out. Microsoft fixed it on its servers.

    0clicks needed · CVE-2025-32711, rated critical
    How TriShell handles this

    An assistant can only leak what it can reach. Every TriShell retrieval is scoped to the asker’s tenant and permissions.

    SecurityWeek · 12 Jun 2025
  • Exposed databaseJan 2025

    DeepSeek

    Chat logs and API keys sat in an open database

    Wiz Research found two DeepSeek databases open to the internet with no password. They held user chat history, API keys and backend details. DeepSeek locked them down after Wiz reported it.

    1M+log lines readable without a password
    How TriShell handles this

    TriShell’s audit log scrubs personal data and prompt content before anything is written.

    Wiz Research · 29 Jan 2025
  • Stolen passwordsApr–Jun 2024

    Snowflake customers

    Stolen passwords opened company data warehouses

    Attackers signed in to customer accounts with passwords harvested by malware on unrelated machines. Where multi-factor authentication was off, nothing else stood in the way. Data was then sold or ransomed.

    ≈165organizations targeted, per Mandiant
    How TriShell handles this

    Sign-in runs through your own identity provider, and each role sees only the documents it’s granted.

    Mandiant via Cybersecurity Dive · Jun 2024
  • Leaky storage linkSep 2023

    Microsoft Research

    A link to AI models opened 38 TB of internal data

    A storage link in a public GitHub repo was meant to share AI models. It granted full control of the whole account, including two employees’ computer backups holding passwords, keys and Teams messages.

    38 TBexposed, including 30,000+ Teams messages
    How TriShell handles this

    Visibility is set per document and folder: private, named roles or people, or the whole tenant.

    Wiz Research · 18 Sep 2023
  • Supplier breachMay–Jun 2023

    Xplain

    A contractor’s breach put Swiss federal files online

    Play ransomware hit Xplain, an IT supplier to Swiss federal police and justice offices, and leaked 1.3 million files. Among them: personal data, classified documents and passwords from federal offices.

    65,000leaked files concerned the federal government
    How TriShell handles this

    TriShell deploys in the region you require, including Switzerland, and tenants never see each other’s data.

    NCSC report via The Record · 7 Mar 2024
  • Shadow AIApr–May 2023

    Samsung

    Engineers pasted chip source code into ChatGPT

    Engineers in Samsung’s chip division pasted proprietary source code and internal meeting notes into ChatGPT for help. The data now sat on servers Samsung didn’t control, and a ban on generative AI followed.

    3separate leaks reported within about 20 days
    How TriShell handles this

    TriShell can run fully self-hosted on open-weight models, so prompts and documents stay on your infrastructure.

    Bloomberg · 2 May 2023
01 / 07
How TriShell keeps documents in bounds

Each story links to the report it’s drawn from. Figures are as published there.

01 · Private by design

Staysonyourservers

Run TriShell in your own cloud account or on-premises, in the region you choose. Documents, the search index and the audit log stay inside your perimeter, and with self-hosted models nothing leaves your network.

Deployment options
02 · Grounded answers

Answersyoucancheck

Every reply cites the passages it used, and each citation is checked against the answer before you see it. When your documents don’t cover a question, TriShell says so instead of guessing.

See a cited answer
03 · Model choice

Yourmodel,yourbudget

Pick from 20+ models, from open-weight Qwen, gpt-oss and DeepSeek to Claude, and switch per message. Send routine questions to lower-cost models and keep the premium ones for the hard cases.

Browse the models
04 · Integrations

Everytool,oneplace

Connect Outlook mail and calendar, Teams, Slack, Google Drive and your ERP. Ask in plain language and TriShell reads, drafts and schedules across them from the same chat.

See integrations
05 · Audit trail

Everysteponrecord

Sign-ins, searches, denied requests, connector actions and admin changes each write an audit event: who, what, when and the outcome. Personal data and prompt text are scrubbed before anything is stored.

Inside the audit log
06 · Multilingual

Multilingual,fluentacrossEurope

TriShell is multilingual by design: ask in your language and it finds the answer in documents written in any other language, then replies in the language you asked in. English, German, French, Italian, Spanish and Europe’s other major languages all work the same way, because the models that search and read your documents are trained on more than 100 languages.

Talk to us about languages
07 · Internal + external knowledge

Lookoutward,leaknothing

When a question needs outside facts, TriShell can search the web alongside your documents. Only a short, self-contained search query leaves; no document text and no chat history. Web and internal sources are cited separately, every outbound query is logged, and you can switch it off entirely.

How the boundary works
Before you ask

Questions, answered

What teams usually want to know before trying TriShell. Anything else, ask us directly.

Ask us a question

  • Three. TriShell Cloud runs fully managed on dedicated TriShell servers in Switzerland. TriShell Shield keeps your documents on your premises and does the processing in the cloud. TriShell Vault runs entirely on your own infrastructure. We’ll help you pick the one that fits.

  • Yes. Every option is built with security at its core. Your data stays protected and isolated, is never shared with third parties and is never used to train AI models.

  • The common ones: PDF, Word, Excel, PowerPoint, email and plain text. We can also connect the document management systems you already use.

  • No. It answers only from your documents and cites the passages it used. When it can’t find the answer, it tells you so instead of guessing.

  • It depends on the option. TriShell Cloud is the quickest to set up; TriShell Vault takes longer because it runs on infrastructure you operate.

  • Pricing depends on the deployment option, the number of users and the volume of documents. Get in touch for a quote tailored to you.

  • You choose per message from open-weight and commercial models, including Qwen, gpt-oss, DeepSeek and Claude. With TriShell Vault, everything can run on open-weight models on your own hardware.

  • Yes. Sign-in runs through your organization’s identity provider, and roles decide which documents each person can see.

Personal consultation · No commitment

Ready for AI without the risk?

See how TriShell keeps your data protected while it makes your team faster. Tell us a little about your organization and we’ll set up a demo on documents like yours.

Prefer email?
info@trishell.ch
Prefer to call?
+41 91 208 01 95
Follow us
LinkedIn

We only use these details to reply to your request.