Choosing a deployment option

Hindsight Enterprise comes in four deployment options. They all run the same Hindsight: the same memory engine, API, SDKs, MCP server and console. They differ in where it runs, who operates it, and how isolated it is. This page compares them so you can pick the right one, or a path between them; you can start on one option and move to another later.

The options at a glance

	Hindsight Cloud with Enterprise features	Private cloud	Bring your own cloud (BYOC)	On-premises
Tenancy	Multi-tenant; your organization's data is logically isolated	Single tenant	Single tenant	Single tenant
Where it runs	Hindsight Cloud	A dedicated deployment in Vectorize's cloud account	Your AWS, Google Cloud or Azure account	Your Kubernetes infrastructure
Who owns the infrastructure	Vectorize	Vectorize	You	You
Who operates Hindsight	Vectorize	Vectorize	Vectorize, through access you grant and can audit	You, with Vectorize's help
Where your data lives	Hindsight Cloud	A dedicated database and storage, in the region you choose	Your cloud account, in your region	Your data center
Network access	Public HTTPS endpoints	Public with IP allowlisting, or private (PrivateLink, Private Service Connect, Private Link)	Public with IP allowlisting, or private (PrivateLink, Private Service Connect, Private Link)	Inside your network
Air-gapped	No	No	No	Supported
Upgrades	Continuous, by Vectorize	Scheduled with you, by Vectorize	Scheduled with you, by Vectorize	Scheduled with you; Vectorize ships the release
Time to get started	As soon as features are enabled	Days: Vectorize provisions the deployment	Days to weeks: depends on your account setup and approvals	Weeks: depends on your infrastructure
Learn more	Cloud with Enterprise features	Private cloud	BYOC	On-premises

Every option includes the Enterprise feature set: SSO and MFA, Memory Defense, data privacy, audit logs, webhooks and SIEM and Enterprise support. Hindsight Memlake is available on every option: most of Hindsight Cloud already runs on it, managed by Vectorize, and the single-tenant options (private cloud, BYOC and on-premises) run it in their own buckets.

How to choose

Start with Hindsight Cloud with Enterprise features if you want SSO, Memory Defense, compliance controls and contracted support, and a shared, multi-tenant service meets your security requirements. It is the fastest way to get Enterprise capabilities, with nothing to install.

Choose private cloud if you need single-tenant isolation (your own database, storage and compute), a specific region, or private connectivity, but don't want to run infrastructure. Vectorize operates everything.

Choose BYOC if your data must stay in a cloud account you own: for data-residency, procurement or security policy reasons, or to use committed cloud spend and the AI models in your own account (Amazon Bedrock, Vertex AI, Azure OpenAI). Vectorize still operates Hindsight for you.

Choose on-premises if Hindsight must run in your own data center or in an air-gapped environment, or if you need full operational control. Vectorize provides the software, sizing, installation help and upgrades; your team runs the infrastructure.

Who is responsible for what

Area	Cloud with Enterprise features	Private cloud	BYOC	On-premises
Cloud account or hardware	Vectorize	Vectorize	You	You
Kubernetes, databases, storage	Vectorize	Vectorize	Vectorize	You
Installing and upgrading Hindsight	Vectorize	Vectorize	Vectorize	Shared
Monitoring and backups	Vectorize	Vectorize	Vectorize	Shared
Identity provider and SSO configuration	You	You	You	You
Users, roles and API keys	You	You	You	You
Network connectivity from your applications	You	Shared	Shared	You

Operations covers upgrades, backups, monitoring and support for the single-tenant options in detail.

Next steps

• Read the page for the option you're considering, starting from the table above.
• For private cloud and BYOC, review the private networking options.
• Book a call to discuss your requirements with the Hindsight team.