There is a category difference between an AI system that answers a question about a portfolio and one that rebalances it. The first is a research tool, and if it is wrong a human notices before anything happens. The second is part of the investment process, and its outputs are subject to the same supervisory expectations as any other step in that process.
Swiss institutional finance is now crossing that line. Aisot Technologies, an ETH Zurich spinoff, closed a CHF 2 million seed extension in August to deploy agentic AI across institutional portfolio management - strategy development, backtesting, rebalancing and continuous monitoring, structured as autonomous agent workflows rather than as a chat interface. The round brought in an investor from the established Swiss private-markets world, which is its own form of validation: regulated finance does not fund tooling it expects to fail an audit.
Transparency as an architectural requirement
What distinguishes the approach is that oversight is treated as a design constraint rather than a feature added later. Every agent step produces a decision record. Backtesting runs against the institution’s own data. Monitoring agents operate continuously inside the institution’s infrastructure boundary.
None of that is decoration. Under FINMA supervision, an investment decision has to be reconstructable after the fact - what inputs the system saw, what it concluded, why it acted. A system that cannot produce that record is not merely inconvenient; it is unusable for its intended purpose, however good its returns look in testing.
This is where agentic architectures diverge sharply from conversational ones. A chatbot’s output is advisory, and the human who acts on it is the accountable party. An agent that executes has inserted itself into the chain of accountability, and the chain has to be documented all the way through.
Where the inference runs becomes a supervisory question
The consequence follows directly, and it is the part most institutions underestimate. If the agent is part of the supervised investment process, then the infrastructure the agent runs on is part of that process too.
An institution that routes agent inference through an API in a foreign jurisdiction has placed a third party inside the core of its investment workflow - one whose model version it does not control, whose availability it cannot guarantee, and whose processing sits outside the legal boundary its supervisor assumes. The position is defensible for a research assistant. It is considerably harder to defend for a system that moves positions.
Compare this with the standards applied to trading infrastructure itself. No Swiss wealth manager would run order execution through an opaque foreign service on the grounds that it was convenient and the vendor’s terms looked reasonable. Execution systems are held to explicit standards on residency, auditability, continuity and control. Agentic AI that participates in the same decisions attracts the same expectations - not because a new rule was written, but because the existing rules already cover what the system does.
The practical reading
For Swiss wealth managers evaluating agentic AI, the useful question is not whether the technology is capable enough. Aisot’s funding and the calibre of its backing suggest that debate is largely settled for well-scoped institutional workflows.
The question is whether the compute underneath meets the same standard as the rest of the regulated stack. Dedicated infrastructure under Swiss jurisdiction answers that cleanly: the decision records stay where the supervisor expects them, the model version is one the institution pinned deliberately, and the boundary that compliance depends on is a physical fact rather than a contractual assurance.
Agentic AI does not create a new compliance regime. It moves AI infrastructure from the IT budget into the supervised perimeter, where the standards were always going to be higher.