Choosing a deployment option
Hindsight Enterprise comes in four deployment options. They all run the same Hindsight: the same memory engine, API, SDKs, MCP server and console. They differ in where it runs, who operates it, and how isolated it is. This page compares them so you can pick the right one, or a path between them; you can start on one option and move to another later.
The options at a glance
| Hindsight Cloud with Enterprise features | Private cloud | Bring your own cloud (BYOC) | On-premises | |
|---|---|---|---|---|
| Tenancy | Multi-tenant; your organization's data is logically isolated | Single tenant | Single tenant | Single tenant |
| Where it runs | Hindsight Cloud | A dedicated deployment in Vectorize's cloud account | Your AWS, Google Cloud or Azure account | Your Kubernetes infrastructure |
| Who owns the infrastructure | Vectorize | Vectorize | You | You |
| Who operates Hindsight | Vectorize | Vectorize | Vectorize, through access you grant and can audit | You, with Vectorize's help |
| Where your data lives | Hindsight Cloud | A dedicated database and storage, in the region you choose | Your cloud account, in your region | Your data center |
| Network access | Public HTTPS endpoints | Public with IP allowlisting, or private (PrivateLink, Private Service Connect, Private Link) | Public with IP allowlisting, or private (PrivateLink, Private Service Connect, Private Link) | Inside your network |
| Air-gapped | No | No | No | Supported |
| Upgrades | Continuous, by Vectorize | Scheduled with you, by Vectorize | Scheduled with you, by Vectorize | Scheduled with you; Vectorize ships the release |
| Time to get started | As soon as features are enabled | Days: Vectorize provisions the deployment | Days to weeks: depends on your account setup and approvals | Weeks: depends on your infrastructure |
| Learn more | Cloud with Enterprise features | Private cloud | BYOC | On-premises |
Every option includes the Enterprise feature set: SSO and MFA, Memory Defense, data privacy, audit logs, webhooks and SIEM and Enterprise support. Hindsight Memlake is available on every option: most of Hindsight Cloud already runs on it, managed by Vectorize, and the single-tenant options (private cloud, BYOC and on-premises) run it in their own buckets.
How to choose
Start with Hindsight Cloud with Enterprise features if you want SSO, Memory Defense, compliance controls and contracted support, and a shared, multi-tenant service meets your security requirements. It is the fastest way to get Enterprise capabilities, with nothing to install.
Choose private cloud if you need single-tenant isolation (your own database, storage and compute), a specific region, or private connectivity, but don't want to run infrastructure. Vectorize operates everything.
Choose BYOC if your data must stay in a cloud account you own: for data-residency, procurement or security policy reasons, or to use committed cloud spend and the AI models in your own account (Amazon Bedrock, Vertex AI, Azure OpenAI). Vectorize still operates Hindsight for you.
Choose on-premises if Hindsight must run in your own data center or in an air-gapped environment, or if you need full operational control. Vectorize provides the software, sizing, installation help and upgrades; your team runs the infrastructure.
Who is responsible for what
| Area | Cloud with Enterprise features | Private cloud | BYOC | On-premises |
|---|---|---|---|---|
| Cloud account or hardware | Vectorize | Vectorize | You | You |
| Kubernetes, databases, storage | Vectorize | Vectorize | Vectorize | You |
| Installing and upgrading Hindsight | Vectorize | Vectorize | Vectorize | Shared |
| Monitoring and backups | Vectorize | Vectorize | Vectorize | Shared |
| Identity provider and SSO configuration | You | You | You | You |
| Users, roles and API keys | You | You | You | You |
| Network connectivity from your applications | You | Shared | Shared | You |
Operations covers upgrades, backups, monitoring and support for the single-tenant options in detail.
Next steps
- Read the page for the option you're considering, starting from the table above.
- For private cloud and BYOC, review the private networking options.
- Book a call to discuss your requirements with the Hindsight team.