Hybrid Cloud - Managed control plane

Overview

Get to production fast without giving up data residency. DeepintShield hosts the control plane – dashboards, policy management, analytics while the data plane runs inside your own cloud (Azure, GCP, or AWS). Every prompt, data, and model call stays in your environment. The two planes connect over a single outbound-only, certificate-pinned mTLS tunnel, so there are no inbound ports to open and nothing sensitive leaves your boundary. Telemetry is pulled as opt-in aggregates, never raw content.

How it works

Deploy the data plane in your VPC with one Helm chart / Terraform module.

It dials out to the managed control plane over an outbound-only mTLS tunnel - no inbound exposure.

You set policies, keys, and budgets in the hosted dashboard; the data plane enforces them in-process.

Only opt-in aggregate metrics flow back; prompts, responses, and data stay with you.

Start using through SDK.

What runs where

Control plane

DeepintShield-managed cloud: dashboards, config, analytics.

Data plane

Your VPC: Azure / GCP / AWS - gateway, guardrails, PEP/PDP, traffic.

Your prompts, responses & keys

Never leave your environment

Best for

Teams that want fast setup and managed upkeep without sending data to a vendor Data-residency-sensitive workloads (BFSI, healthcare, DPDP/GDPR) Organizations on Azure/GCP/AWS that want one-command deployment

At a glance

Data egress: None · Connectivity: outbound-only mTLS, no inbound ports We manage: control plane & upgrades · You manage: your cloud resources & keys Setup: fastest path to production.

Hybrid Cloud – Managed control plane · your data plane

"Govern, Secure and Control every AI Action"