# On Substrait's cloud, or inside yours

> Start on a standard setup on Substrait's cloud with nothing to install, or run Substrait in your own cloud account or data centre. In your environment, the whole tool and its data stay inside your perimeter.

URL: https://substrait.build/capabilities/your-own-cloud/  
Last updated: 2026-11-06

Substrait runs where you need it. Start on a standard setup on Substrait's cloud, with nothing to install, or run Substrait inside your own cloud account or data centre, where the whole tool and its data stay inside your perimeter.

## Two ways to run Substrait

| | On Substrait's cloud | In your own cloud |
|---|---|---|
| What you install | Nothing | Substrait, in your cloud account or data centre |
| Sign-in | Google, or a sign-in link by email | Your company's own sign-on |
| Security settings | Standard settings, set up with you | Your own policies |
| Who sets it up | You, with no setup fee, configured by your own team | Substrait's forward-deployed team, scoped with your IT |
| How long you stay | As long as you like | Yours to run |

The move from Substrait's cloud to your own is always open.

## On Substrait's cloud

Many organisations share one Substrait installation, and each is kept apart.
Every query carries the organisation, and a request for another organisation's data fails closed.
Each tool gets its own database and credential, apart from every other tool and from the platform itself.

## In your own cloud

"Your own environment" means your own tenant: your cloud account, your identity and access rules, your keys and your bill.
It can be AWS, Google Cloud, Azure or your own data centre.

- Substrait runs the whole tool, front end, back end and data, inside your perimeter.
- Substrait runs the unmodified tool your builder produced.
- Substrait's control plane sends policy and deployment instructions; your side sends back status and decisions, never data.
- The connection is outbound from your side, so Substrait never opens a connection into your network.
- Your audit trail and reports are written to storage you control.
- You can manage your own encryption keys.
- Each organisation uses its own AI model key.

## Four topologies

| Topology | Where each part runs |
|---|---|
| Substrait's cloud | Control plane and tools on Substrait's cloud |
| Hybrid | Control plane on Substrait's cloud; tools and data in your cloud account |
| Self-hosted | Control plane and tools in your environment |
| Air-gapped | Everything in your data centre, with no outbound connection |

## Related

- [How to run AI-built tools inside your own cloud](https://substrait.build/problems/keep-ai-built-tools-in-our-own-cloud/): Substrait runs the whole tool, front end, back end and data, inside the company's own cloud account or data centre. Only policy and deployment instructions cross the boundary; data never leaves.
- [Security, configured exactly for your organisation](https://substrait.build/security/): Security, Substrait's third pillar. Every release is checked before production, and each organisation sets how strict that check is: its own risk tiers, blocking rules, severity names, approvers and deadlines, with a full audit trail nobody can alter.
- [Solutions for every starting point](https://substrait.build/solutions/): Substrait serves three kinds of company: teams already building with AI, companies ready to start whose work still runs on spreadsheets, chat and paper, and companies stuck on a closed legacy vendor system. Each has its own way in.
- [How we work, and how pricing works](https://substrait.build/how-we-work/): Substrait is a platform and a forward-deployed team in your region. It comes as one pre-configured system, with two paths in: teams that already build, and companies whose people do not build yet. Pricing is a monthly seat for each builder, approver and admin, with a one-time setup fee only when Substrait's team sets it up; there is no platform fee and viewers are free.