Most teams use our managed cloud and are benchmarking the same day. Regulated and data-sensitive organizations can choose a dedicated instance, a hybrid connector that keeps contract files inside their own network, or a fully self-hosted deployment. Same platform, same reports, different boundaries.
This is how nearly all of our customers run Vera AI. We operate everything: the application, the database, storage, and backups. Your organization's data is isolated at the database layer with row-level security, contract files live in private encrypted storage with short-lived signed download links, and every view and download lands on the audit trail. You maintain nothing, and new features and fresh benchmark data arrive continuously.
| Cloud at a glance | |
|---|---|
| Who operates it | We do. Zero maintenance on your side. |
| Where contract files live | Private encrypted cloud storage, no public URLs, signed links that expire in about a minute. |
| Tenant isolation | Row-level security in the database, tested with real cross-organization attempts. |
| Identity | SAML and OIDC single sign-on, SCIM provisioning, TOTP multi-factor. |
| Updates | Continuous. New benchmarks and features appear without any action from you. |
| Benchmark network | Full access. |
| Time to first benchmark | Same day. |
A single-tenant deployment we provision and operate exclusively for you: a dedicated database, dedicated file storage, dedicated encryption keys, and your own subdomain or custom domain, hosted in the region your policy requires. It answers the two requirements shared multi-tenancy cannot: data residency mandates and security policies that rule out a shared database regardless of how it is isolated.
| Dedicated cloud at a glance | |
|---|---|
| Who operates it | We do, on infrastructure provisioned only for you. |
| Where contract files live | Your dedicated storage, encrypted with per-customer keys, in your chosen region. |
| Tenant isolation | Physical: a separate database and storage, plus the same row-level policies inside it. |
| Identity | SAML and OIDC single sign-on, SCIM provisioning, TOTP multi-factor, your domain. |
| Updates | Managed by us on an agreed maintenance cadence. |
| Benchmark network | Full access. |
| Time to first benchmark | Days. |
A lightweight connector runs inside your environment and reads contracts locally. It extracts the commercial terms, prices, quantities, dates, and discount levels, shows your team exactly what it found, and sends only the figures you approve to our cloud for benchmarking. The documents themselves never cross your boundary. You get the full market comparison, the negotiation targets, and the renewal calendar, built from numbers instead of files.
| Hybrid connector at a glance | |
|---|---|
| Who operates it | You run the connector, we run everything else. |
| Where contract files live | Inside your network, always. They are never uploaded. |
| What reaches our cloud | Normalized commercial figures your team has reviewed and approved. |
| Identity | Same as Cloud: SSO, SCIM, and MFA for the workspace your team signs into. |
| Updates | Cloud side continuous, connector updated by your team from our releases. |
| Benchmark network | Full access for the figures you share. |
| Time to first benchmark | Weeks, including your security review. |
For organizations where nothing crosses the perimeter: defense, government, and the strictest financial mandates. We deliver the platform as versioned releases your team deploys into your own cloud account or data center, with our runbooks and support behind you. It is the most control you can have, and it is also the most work, which is why we scope it as a joint engagement rather than a checkbox.
| Self-hosted at a glance | |
|---|---|
| Who operates it | Your team, with our runbooks, releases, and support. |
| Where contract files live | Your infrastructure, entirely. |
| Tenant isolation | Not applicable: the whole deployment is yours alone. |
| Identity | Connects to your identity provider; MFA and role policies enforced locally. |
| Updates | Versioned releases you apply on your own schedule. |
| Benchmark network | Periodic market data snapshots; live network features are limited. |
| Time to first benchmark | Months, scoped together as an engagement. |
| Cloud | Dedicated cloud | Hybrid connector | Self-hosted | |
|---|---|---|---|---|
| Best for | Most teams. Fast start, lowest cost, always current. | Residency mandates and policies that rule out shared infrastructure. | Policies where documents cannot leave the network. | Air-gapped and sovereign environments. |
| Who operates it | Us | Us, on your dedicated infrastructure | You run one connector, we run the rest | Your team, with our support |
| Where contract files live | Our cloud, private and encrypted | Your dedicated instance, region of your choice | Your network, never uploaded | Your infrastructure, entirely |
| Data residency choice | Our hosting regions | Yes, you choose the region | Figures only reach our cloud | Wherever you run it |
| Updates | Continuous | Managed, agreed cadence | Cloud continuous, connector by your team | Versioned releases |
| Benchmark network | Full | Full | Full, for approved figures | Periodic snapshots |
| SSO, SCIM, MFA | Included | Included | Included | Via your identity provider |
| Audit logging | Full trail, SIEM streaming | Full trail, SIEM streaming | Full trail, plus a local connector log | Full trail, direct to your SIEM |
| Operational work for you | None | None | One small component | Full stack |
| Typical time to first benchmark | Same day | Days | Weeks | Months |
| Availability | Every plan, today | Enterprise agreements | Enterprise early access | By arrangement |
We describe availability honestly. Cloud is live for every customer today. Dedicated cloud, the hybrid connector, and self-hosted deployments are scoped with your security team as part of an Enterprise conversation, and we will tell you plainly what is ready now and what is on the roadmap.
The deployment model decides where your data lives. It does not limit how your team reaches it.
We will walk through the options against your requirements, honestly. Start with how we secure the platform.