Sovereign · on-prem · OFFICIAL-SENSITIVE
When data cannot leave your boundary
Public sector, defence, healthcare, finance: anywhere the data classification or regulator forbids egress. GraphANN® ships as a single Go binary with embedded ONNX embedding, runs inside your VPC, and makes zero outbound calls in normal operation.
Run enterprise search in a fully disconnected environment: no outbound calls, no cloud dependency, auditable from first byte to last.
01
Deploy the binary inside the boundary
One container or one binary on a VM. No SaaS dependency, no telemetry, no licence server.
02
Embedding stays local
Built-in ONNX runtime ships an embedding model in the binary. Or wire an in-VPC Azure OpenAI / private model endpoint. Never the public internet.
03
Auth and audit
Argon2id-hashed API keys per tenant, mTLS optional, structured audit logs. RBAC roles map to your existing identity boundary.
Best fit when
- Compliance forbids data egress (UK gov OFFICIAL-SENSITIVE, HIPAA, FINMA, etc.)
- You need a single artefact your security team can review and pin
- You operate on-prem, in a private VNet, or in a sovereign cloud region
- Your procurement values vendor IP indemnity and a commercial support contract
Wrong choice when
- You operate in a fully online cloud and air-gap discipline isn't a constraint
- Your team wants a managed service rather than a binary you run yourselves
0 calls
outbound at runtime
Commercial
with IP indemnity
1 binary
to ship through change control