Deploy where
your data lives.
SaaS for speed. BYOC for control. On-prem for air-gap. The EAIP architecture cleanly separates control plane from data plane — so your data stays in your cloud regardless of which model you choose.
Your cloud. Your rules.
Your data never leaves.
EAIP separates the control plane (EAIP-managed) from the data plane (your VPC). For regulated enterprises, BYOC means AI capabilities with zero data egress risk.
SaaS
FastestEAIP-managed. Full stack on our infrastructure. Start in minutes, no DevOps.
- Setup time
- < 1 hour
- Data control
- Standard
- Data residency
- ap-south-1 (shared)
Best for: Startups and teams that want zero infra burden
- Managed updates
- Built-in compliance
- Shared audit infra
BYOC
EnterpriseYour cloud, our control plane. Deploy data plane in your AWS VPC. Data never leaves your account.
- Setup time
- 1–3 days
- Data control
- High
- Data residency
- Your VPC (ap-south-1)
Best for: Banks, NBFCs, insurtechs under RBI/IRDAI
- Data plane in your VPC
- STS AssumeRole, not key sharing
- Your KMS keys
On-Prem
RoadmapFull air-gap deployment on your own hardware. Helm chart for Kubernetes. No external calls.
- Setup time
- 1–2 weeks
- Data control
- Maximum
- Data residency
- Your hardware
Best for: Defence, govt, classified workloads
- Zero egress
- Helm chart deploy
- Fully air-gapped
BYOC Architecture
Control Plane (EAIP-managed)
- Guard Gate — Cedar ACL + rate limiting
- Model Router — LiteLLM + region routing
- Trace Store — WORM audit chain
- DPDP Consent Manager
Data Plane (Your VPC)
- Agent Runtime — your EC2/ECS/EKS
- AWS Bedrock — your account, ap-south-1
- RDS / vector store — your data
- STS AssumeRole — no key sharing
All cross-plane calls authenticated via INTERNAL_SERVICE_TOKEN. Control plane never stores or processes customer data. Only telemetry and audit hashes cross the boundary.