Swiss banking secrecy: a unique legal regime
Article 47 of the Swiss Banking Act (BA) has protected banking secrecy in Switzerland since 1934. This is not simply a commercial practice — it is a criminal provision. Unauthorized disclosure of information about a bank's clients constitutes a criminal offense punishable by up to three years' imprisonment.
In this context, introducing AI tools into banking workflows is not simply a technology decision. It is a legal decision.
Where the risk materializes
Consider a concrete scenario. A wealth manager in Geneva uses ChatGPT to:
- Draft a performance report for a client
- Summarize sector news for a market note
- Prepare a presentation for a client meeting
In each case, if they include the client's name, assets, positions, or even details allowing indirect identification, they are sending information covered by banking secrecy to an American server.
What FINMA says
FINMA has published several circulars and positions on outsourcing and cloud. Its central position: supervised institutions must ensure that protected data remains under Swiss control or equivalent protection, and that FINMA's supervisory rights are not compromised.
What Nectos brings to the financial sector
- Exclusive Swiss processing: no data ever leaves Swiss jurisdiction
- Prompt anonymization: automatically detect and mask client information before processing
- Full audit trail: every interaction is tracked, exportable for internal controls and FINMA inspections
- No training on your data: contractual guarantee
- Compliant DPA: adapted to regulated financial institutions
Banking secrecy and AI are not incompatible. They become so only when the AI is not designed to operate within this framework.