PRESS RELEASE · 15 October 2026

Fictitious press release. This article describes a vision we are actively building towards. We are looking for partners and early adopter customers who want to be first with a 100 % Swedish AI stack. Get in touch if you want in.

100 % Swedish: we closed the last back door

Lights Out announces that its entire operations stack — infrastructure, AI inference and agent runtime — now runs exclusively on Swedish soil, operated by Swedish companies, under Swedish law. No data leaves the country. No foreign government can subpoena it.

Background

Throughout 2025 and the first half of 2026, we have listened to the same conversation in boardroom after boardroom. It goes roughly like this: "We want to use AI. But where does the data end up? Who owns the model? Can US authorities request it under the Cloud Act?"

It is a reasonable question. It was simply asked about two years too late. The Cloud Act was enacted in 2018.

The Swedish Cybersecurity Act, implementing the EU NIS2 Directive, entered into force earlier this year. It codifies what many already knew but did not act on: European organisations with essential functions need to control their data. Not in theory. In practice.

We decided to stop waiting for the market to mature and built the stack ourselves. Or rather: we chose partners who had already built it.

The stack

The Lights Out production environment now runs on three layers, all with Swedish ownership and Swedish jurisdiction:

Infrastructure: Safespring and Elastx. Compute, storage and Kubernetes in Swedish data centres. No data crosses the national border. No American parent company with reporting obligations. Safespring has consistently ranked highest among European cloud providers in independent benchmarks throughout 2026. Elastx delivers managed Kubernetes in Stockholm with the kind of stability that makes you forget the infrastructure exists — which is the entire point.

AI inference: Berget AI. Open-source models on dedicated GPU hardware in Kista, Stockholm. No customer data is used for training. No data is shared with third parties. The API is OpenAI-compatible, which means migrating from American services takes roughly one afternoon and a cup of coffee. We know. We have done it.

Agent runtime: Lights Out Secure Runtime. Our own security-classified environment for AI agents and code automation. The agents — including Ember and Umbra, who at this point have been employed longer than most interns — run in isolated containers with full audit trails, role-based access control and encrypted communication between every step in the workflow. Everything is logged. Nothing is sent home to California.

Why it matters

For a Swedish e-commerce company handling customer data, payment flows and product information, the question is no longer whether they can afford a Swedish stack. The question is whether they can afford not to have one.

GDPR has always required that personal data be protected. Schrems II established that American cloud services do not automatically meet that standard. The Cybersecurity Act raises the bar further for organisations classified as essential. And if your company generates enough revenue to employ a CTO, it probably generates enough to be covered.

What we offer is not a compromise. It is a complete stack — from model to operations — that never needs to pass through a jurisdiction you do not control.

What we are not saying

We are not saying that American cloud services are bad. They are excellent. We are saying that depending on them carries a legal risk that most Swedish companies have chosen to ignore, and that this choice becomes harder to defend with every passing quarter.

Nor are we claiming this was our idea. Safespring, Elastx and Berget AI built the infrastructure. AI Sweden funded the foundational research. We did the only thing we are good at: connected the parts and put them to work.

Contact

Stefan Sandin, Founder
hello@spinout.se
Lights Out Operations AB

We closed the back door. You can open the front door.