ClovieRun Clovie where your rules say AI traffic must stay.
One codebase, the same images and the same features in every option. Start with one, move to another later.
SaaS
We run it: upgrades, scaling, backups and monitoring. Each organization’s data is isolated at the database layer. Data is stored in the United States.
Customer VPC
In your own AWS, Google Cloud or Azure account, next to your agents. Agent traffic, audit records and cost data never leave your network, and nothing calls back to Clovie.
On-premises
On your hardware or private cloud, with Helm on Kubernetes or Docker Compose on a single host, using your databases, secret stores and identity provider.
Air-gapped
No internet access. Load releases into your own registry, verify signatures offline and send usage back as signed files.
Gateways in your network
Use the Clovie console while gateways run in your cloud or data center, so request content stays local.
Multi-tenant installs
One self-hosted install serves many separate customer organizations, each on its own licence, run from a provider console.
Compare the options
| Option | SaaS | VPC | On-premises | Air-gapped |
|---|---|---|---|---|
| Who operates Clovie | Clovie | You | You | You |
| Where agent traffic flows | Clovie’s hosted gateway | Your cloud account | Your data center | Your isolated network |
| Internet access needed | Yes | Model providers only | Model providers only | No |
| Upgrades | Automatic | You apply them | You apply them | You import them |
| Licence | Not needed | Signed, checked offline | Signed, checked offline | Signed, checked offline |
| Editions | All four | Enterprise and Enterprise Shield | Enterprise and Enterprise Shield | Enterprise and Enterprise Shield |
The same features everywhere. Air-gapped installs leave out what needs the internet, such as connected guardrail vendors and Datadog export.
Operable by your team from day one.
- Offline licence. It states products, limits and expiry, is checked inside your network with no call home, and has a 14-day grace period after expiry.
- Signed images you verify before you run them, online or offline.
- Compiled images with no readable source in self-hosted services.
- All-or-nothing upgrades with a server-side dry run, a verified backup and automatic rollback.
- Your secret store: Vault, AWS, Azure, Conjur, Kubernetes secrets or environment variables.
- Capacity checks: the chart checks database connection budgets before an install goes ahead.
Self-hosted installs keep agent traffic, audit and cost data inside your network.
Choose the deployment that fits your rules.
We'll help you size it and plan the install.