Deploy it where your data already lives
The same platform runs in a managed cloud, inside your own data centre, or fully air-gapped. This page sets out what each mode gives you — and what it costs you — so the choice is made on facts rather than on a sales call.
Managed cloud
We run it, in India, on infrastructure you can name.
Best for: Teams without infrastructure staff who still need data residency.
On-premise / your cloud
Deploys inside your own data centre, a State DC, or a MeitY-empanelled / NIC cloud.
Best for: Regulated enterprises and PSUs with their own hosting mandate.
Air-gapped
Zero outbound internet. Demonstrable live — pull the network cable and it keeps working.
Best for: Defence, government and anyone whose data cannot touch a public network.
What differs between them
Every compliance capability works in every mode. What changes is the handful of features that need outbound network access.
| Capability | Managed cloud | On-premise | Air-gapped |
|---|---|---|---|
| Discovery, classification & live inventory | Supported | Supported | Supported |
| Consent, DSR, grievance & breach management | Supported | Supported | Supported |
| Governance, RoPA, DPIA & audit vault | Supported | Supported | Supported |
| Offline classifier (column-name, regex, heuristics)The default classifier needs no network and no model host. | Supported | Supported | Supported |
| LLM-assisted classificationPluggable. Air-gapped requires a local or in-VPC model; no personal data leaves your boundary in any mode. | Supported | Supported | Partial |
| Telemetry & error reportingDisable-able by configuration in every mode and verifiable by egress inspection. Unset means zero outbound traffic. | Supported | Partial | Not available |
| Cloud DSPM posture signalsNeeds reachable cloud provider APIs, so it covers whichever cloud estate the deployment can see. | Supported | Partial | Not available |
| Automatic updatesAir-gapped sites take signed offline update bundles on your schedule. | Supported | Partial | Not available |
| Source-code handover & KTAs the OEM we can hand over source, build on your infrastructure and run knowledge transfer. | Not available | Supported | Supported |
Supported Partial — see note Not available
Ask us to pull the cable
The air-gapped claim is demonstrable, not theoretical. We will show you the platform running with its network disconnected.