ZeroLog is an AI workspace operated from Switzerland that puts three things in one place: a chat over a catalogue of open-weight models, a Linux container you have root on, and coding agents that work inside that container.
AVAILABILITY FIRST: ZeroLog is in a closed private preview. Accounts are opened on request through a waitlist, so you cannot sign up and start today.
The container is the part that separates it from an ordinary chat product. From the Mini plan upward you get Ubuntu 24.04, Debian 12 or Alpine with root access. Packages and files persist across restarts and across chats, so an agent can install dependencies, build something and leave it running. Commands the AI wants to execute wait for your approval before they run.
Claude Code, Codex and ZeroLog Code run inside that container. You sign in with your own Claude or ChatGPT account and the vendor bills you directly rather than drawing on ZeroLog credit. Bring your own provider key and ZeroLog takes no margin at all.
Background work is first class. A /goal run keeps going after you close the tab, and there are scheduled jobs and snapshots alongside it. Clients cover the web app, ZeroLog Code for the terminal, ZeroLog Mobile for Android, and a side-panel extension for Chrome and Firefox.
ISOLATION, which is documented in unusual detail. Each workspace is its own container that no other user shares, and workspaces cannot reach one another over the network even on the same machine. ZeroLog uses gVisor as a userspace kernel where available, and states that a machine without gVisor does not start workspaces at all. The Standard class adds a system call filter blocking interfaces a development environment does not need. A VM class gives a workspace its own kernel, recommended for untrusted code - it starts a few seconds slower and cannot be switched back later. Machines running workspaces never execute at the same moment as another machine on two hardware threads of one physical core, and identical memory pages are not merged across machines. Outbound container traffic goes through a filtered path with IONOS SE in Germany as the gateway. Cloudflare provides DDoS protection and edge access, and vulnerability reports follow security.txt per RFC 9116.
WHERE YOUR DATA GOES, and the caveat that matters. Chats, files and container disks are stored on servers in Seon, Aargau, Switzerland. Pausing a workspace keeps its disk until you delete it. But prompts and attachments are sent to Featherless in the United States to generate answers, and each answer shows its retention status. Claude Code and Codex prompts go to Anthropic or OpenAI under your own contracts with them.
ZeroLog states on its own trust page that no data processing agreement and no standard contractual clauses with Featherless have been signed yet, and that until they are, the transfer to the US relies on the contract-performance exception at Art. 17 para. 1 lit. b FADP rather than on a transfer agreement. ZeroLog has separately said Featherless confirmed in writing that it stores no prompts or answers and does not train on them. An informal written assurance and a signed DPA are different instruments, and for a product positioned on Swiss data protection the distinction is worth understanding before you move sensitive work onto it.
Also worth noting: no independent audit, certification or penetration test is named anywhere on the trust or isolation pages. The published status pages cover uptime and model-provider availability, not security assurance. The architecture is described more openly than most competitors bother with - it simply has not been checked by an outside party, at least not publicly.
PRICING, checked 21 October 2026. Plans including a container start at CHF 9 per month. Model use is paid from prepaid credit in Swiss francs at the inference provider rate plus 2 per cent, with the charge shown under each answer. Using your own provider key carries no margin. The operator is a Swiss sole proprietorship; the site does not name the individual behind it.