01
Architecture
A dedicated cluster in your AWS account, in the region you choose. Private subnets, your own load balancers, no shared resources, no noisy neighbors. AWS today; built to port as more backends land.
← Deployment
Run · Astrolift
Your cloud. Your region. You own it.
Bring your own cloud and Astrolift deploys the whole platform into your account — single-tenant, your VPC, your keys, your data controls. We run the control plane; the environment is yours, and nothing egresses. AWS today, built to port.
Cloud speed. Your perimeter.
Your security team won’t sign off on multi-tenant. Your compliance requirements demand isolation. But you don’t want to spend 18 months building the platform yourself.
BYOC gives you both. The platform runs in your own account — dedicated compute, dedicated storage, private networking — inside the SOC 2 / HIPAA boundary you already operate. Astrolift manages the control plane; you keep the keys and the data. Same platform, same capabilities, in your perimeter.
What changes when it’s your cloud:
Same platform as Cloud Hosted — but the environment, the network, and the data are yours.
- Dedicated compute — Your workloads don't share resources with anyone
- Network isolation — Private VPC with your CIDR ranges
- Data residency — Choose your region (US, EU, APAC)
- Custom domain — ai.yourcompany.com instead of calliope.ai
- SSO integration — Connect to your identity provider (Okta, Azure AD, etc.)
- Dedicated support — Named account team, priority response
Technical Details
02
Identity & Access
SAML 2.0 and OIDC integration. Connect to Okta, Azure AD, Google Workspace, or any SAML provider.
03
Data & Compliance
Your region, your data residency, your encryption keys (BYOK). Data stays inside your perimeter — your compliance boundary is the deployment boundary. Full Zentinelle governance with enhanced audit logging and retention.
