{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":[]},"type":"markdown"},"seo":{"title":"Deployment Options","description":"Control the power of AI Agents in runtime.","llmstxt":{"hide":false,"sections":[{"title":"Table of contents","includeFiles":["**/*"],"excludeFiles":[]}],"excludeFiles":[]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"deployment-options","__idx":0},"children":["Deployment Options"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Capsule Security offers flexible deployment models to meet your organization's security, compliance, and data residency requirements. All deployment options maintain our ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["SOC 2 Type 2"]}," and ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["ISO 27001"]}," certifications, ensuring enterprise-grade security regardless of your chosen architecture."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"deployment-models","__idx":1},"children":["Deployment Models"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"enterprise-saas-multi-tenant","__idx":2},"children":["Enterprise SaaS (Multi-Tenant)"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Our multi-tenant SaaS deployment provides the fastest path to securing your AI agents with zero infrastructure management."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Key Features:"]}]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Multi-tenant architecture with strong logical tenant isolation"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Fully managed by Capsule Security"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Data encrypted at rest and in transit"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Automatic updates and maintenance"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Standard internet connectivity"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Best For:"]}," Organizations that want rapid deployment and minimal operational overhead."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"customer-dedicated-saas-with-byok","__idx":3},"children":["Customer Dedicated SaaS with BYOK"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Dedicated infrastructure with Bring Your Own Key (BYOK) encryption provides enhanced security and data sovereignty while Capsule Security manages the platform."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Key Features:"]}]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Dedicated infrastructure for your organization"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Bring Your Own Encryption Key (BYOK) support"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Enhanced data sovereignty and control"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Customer controls encryption keys"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Standard internet or VPN connectivity options"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Best For:"]}," Organizations with strict data control requirements or specific encryption key management policies."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"customer-hosted-vpc","__idx":4},"children":["Customer Hosted VPC"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"img","attributes":{"src":"/assets/deployment-customer-vpc.cb64e87e3cb82d87dbe9983be8f815e94da1ce616bca69f94fd301cce1356572.9c1bb791.png","alt":"Customer Hosted VPC Architecture"},"children":[]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Maximum data isolation with the database residing in your own VPC while Capsule Security manages the control plane."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Key Features:"]}]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Database resides in customer's VPC"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Control plane managed by Capsule Security"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Maximum data isolation and control"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["VPC peering or Private Link connectivity"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Customer maintains full control over data storage"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Best For:"]}," Organizations requiring complete data isolation or those with strict regulatory requirements."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"a","attributes":{"href":"/guides/deployment-customer-vpc"},"children":["View detailed AWS deployment guide →"]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"deployment-comparison","__idx":5},"children":["Deployment Comparison"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Deployment Model"},"children":["Deployment Model"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Data Location"},"children":["Data Location"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Control Plane"},"children":["Control Plane"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Network Setup"},"children":["Network Setup"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Primary Advantage"},"children":["Primary Advantage"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Enterprise SaaS"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Capsule Security cloud (multi-tenant)"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Capsule Security managed"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Standard internet"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Fastest deployment, zero infrastructure management"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Dedicated SaaS with BYOK"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Capsule Security cloud (dedicated)"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Capsule Security managed"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Standard internet or VPN"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Enhanced security with customer-controlled encryption"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Customer Hosted VPC"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Customer VPC"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Capsule Security managed"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["VPC peering or Private Link"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Full data isolation and control"]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"compliance--security","__idx":6},"children":["Compliance & Security"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["All deployment models are designed to meet stringent compliance requirements:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["SOC 2 Type 2 Certified"]}," - Annual audits verify our security controls"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["ISO 27001 Certified"]}," - Information security management system compliance"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Data Encryption"]}," - All data encrypted at rest and in transit"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Access Controls"]}," - Role-based access control with audit logging"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Regular Security Assessments"]}," - Continuous vulnerability scanning and penetration testing"]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"choosing-the-right-deployment-model","__idx":7},"children":["Choosing the Right Deployment Model"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"consider-enterprise-saas-if-you","__idx":8},"children":["Consider Enterprise SaaS if you:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Want the fastest time to value"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Prefer a fully managed solution"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Have standard compliance requirements"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Want automatic updates and maintenance"]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"consider-dedicated-saas-with-byok-if-you","__idx":9},"children":["Consider Dedicated SaaS with BYOK if you:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Require dedicated infrastructure"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Need to manage your own encryption keys"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Have enhanced data sovereignty requirements"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Want Capsule Security to manage operations"]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"consider-customer-hosted-vpc-if-you","__idx":10},"children":["Consider Customer Hosted VPC if you:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Must keep data within your own infrastructure"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Have strict regulatory requirements for data residency"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Need maximum control over data storage"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Require network-level isolation"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"a","attributes":{"href":"/guides/deployment-customer-vpc"},"children":["Learn more about Customer Hosted VPC deployment →"]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"next-steps","__idx":11},"children":["Next Steps"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"a","attributes":{"href":"/guides/agent-management"},"children":["Get started with Agent Management"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Contact our team at ",{"$$mdtype":"Tag","name":"a","attributes":{"href":"mailto:support@capsule.security"},"children":["support@capsule.security"]}," to discuss your deployment requirements"]}]}]},"headings":[{"value":"Deployment Options","id":"deployment-options","depth":1},{"value":"Deployment Models","id":"deployment-models","depth":2},{"value":"Enterprise SaaS (Multi-Tenant)","id":"enterprise-saas-multi-tenant","depth":3},{"value":"Customer Dedicated SaaS with BYOK","id":"customer-dedicated-saas-with-byok","depth":3},{"value":"Customer Hosted VPC","id":"customer-hosted-vpc","depth":3},{"value":"Deployment Comparison","id":"deployment-comparison","depth":2},{"value":"Compliance & Security","id":"compliance--security","depth":2},{"value":"Choosing the Right Deployment Model","id":"choosing-the-right-deployment-model","depth":2},{"value":"Consider Enterprise SaaS if you:","id":"consider-enterprise-saas-if-you","depth":3},{"value":"Consider Dedicated SaaS with BYOK if you:","id":"consider-dedicated-saas-with-byok-if-you","depth":3},{"value":"Consider Customer Hosted VPC if you:","id":"consider-customer-hosted-vpc-if-you","depth":3},{"value":"Next Steps","id":"next-steps","depth":2}],"frontmatter":{"sidebar":"../sidebars.yaml","seo":{"title":"Deployment Options"}},"lastModified":"2026-02-10T10:33:48.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/guides/deployment-overview","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}