Skip to content

Deployment mode

Cloud

Available

Authpermit runs it. The fastest way to start, and the mode where an outage is ours to fix rather than yours.

What this means

Where data lives The region you choose when the tenant is created.
Who holds the keys Authpermit holds the vault key for your tenant.
Can Authpermit read it Yes, in principle. Access is authorised and every read is in the ledger.

What you give up

We could be compelled to produce your data You inherit our maintenance windows Your region choice is from our list, not any address you like

Data sovereignty is a set of trade-offs, not a feature. The mode that keeps the most from us is also the one where an outage is yours to fix.

Deployment mode

Sovereign

Available

A dedicated deployment inside one jurisdiction, operated by Authpermit but separated from every other tenant.

What this means

Where data lives One named jurisdiction. Nothing leaves it, including backups.
Who holds the keys Held in that jurisdiction; you may hold them yourself.
Can Authpermit read it Only through an authorised path that the ledger records.

What you give up

Costs more than cloud, and takes longer to provision Some cross-region features cannot work by definition Upgrades arrive on a slower cadence

Data sovereignty is a set of trade-offs, not a feature. The mode that keeps the most from us is also the one where an outage is yours to fix.

Deployment mode

Private

Available

Your infrastructure, your operators. Authpermit ships the release; you run it.

What this means

Where data lives Wherever you put it. We are not told.
Who holds the keys Yours alone. We never see them.
Can Authpermit read it No. Not by us, and not under any order served on us.

What you give up

You run it, patch it and page for it Support is limited to what you can show us Lose the vault key and the data is gone — there is no recovery path

Data sovereignty is a set of trade-offs, not a feature. The mode that keeps the most from us is also the one where an outage is yours to fix.

Deployment mode

Air-gapped

Available

No outbound network at all. Every external check degrades to a refusal rather than a guess.

What this means

Where data lives Entirely inside your perimeter.
Who holds the keys Yours, offline.
Can Authpermit read it No, and there is no channel by which we could.

What you give up

Sanctions and registry checks report unavailable, not clear Updates arrive as media you carry in AI features run only if you host the model

Data sovereignty is a set of trade-offs, not a feature. The mode that keeps the most from us is also the one where an outage is yours to fix.

Customer-owned trust infrastructure

Prove who someone is. Then prove you proved it.

Authpermit verifies people, organisations, credentials, devices and AI agents — with evidence, deterministic policy and an audit ledger you can check yourself. Your data, your keys, your AI provider. Two rules hold everywhere: every channel takes the same path, and AI is never the source of truth.

Authpermit ID Identity, authentication and biometrics for people, organizations, devices and AI agents. Authorizer Advanced authentication: device-bound keys, push and QR approvals, biometrics, NFC and OTP. Authpermit Verify Document verification, KYC/KYB, face match, liveness, deepfake defence and background screening. Authpermit Credentials Issue, hold and verify education, employment, licence and clearance credentials with selective disclosure. AuthCaptcha Bot protection and risk assessment: invisible checks, proof of work and explainable decisions. Authpermit Secure Endpoint, application, vulnerability and system security on a shared trust graph. Authpermit Guard IoT, camera and physical-security trust with device identity and edge AI. Authpermit Sentinel Agentic security: microbrains and Infinite Brain that observe, correlate, reason and act within policy. Authpermit AI Monitor Observability for the AI you ship, and visibility in the AI answer engines that describe you.