Skip to content

Single Tenant in Your Own Cloud

Verra runs as a single tenant in a private cluster in your firm's own cloud. Your data is stored there, and your security tools read its audit records. Requests to AI models and a few outside services leave it.

How Verra Runs in Your Cloud

Select a part to see where it runs, and what leaves your cloud.

Inbound

Your peopleBrowser and Office add-ins
Your single sign-on
Your data sourcesSynced in
Verra supportAudited view
Your cloud

App

Verra app
Model gateway

Data

Your data
Audit recordsRead by your security tools

Outside

AI modelsContext, through the gateway
Agent sandboxPackages and chat files only

Verra

Verra operationsReleases, alerts, admin access

  • Network and Encryption

    Traffic reaches Verra encrypted, through a firewall over a private connection, and your data takes no public traffic.

  • Sign-In and Directory

    Your people sign in with your firm's single sign-on, and directory sync adds and removes them as your directory changes.

  • Your Data

    Verra stores your data in your cloud on private endpoints, with automatic backups.

  • AI Models

    Verra's model gateway runs inside your cloud, and requests to AI models go out through it with the question and its context. Those providers don't train on your data or keep it, and your security review gets the full list of outside providers and what each one receives.

  • Agent Sandbox

    The agent runs code in an isolated sandbox outside your cloud, run by an outside provider in the United States. Its network reaches only software packages and your chat's files.

  • Audit Records

    Audit records flow to your own security tools, with a write-once copy. They record who acted, on what, and whether it worked, without the contents of your documents or prompts.

  • Support Access

    When our support team views a chat to help you, the request comes from one address your firm allows in, and the view goes into your audit trail.

  • Deletion

    Chats with no recent activity are deleted with their files unless they're pinned, in a folder or project, or shared for review. People removed from your directory lose access to Verra.

  • What Talks to Verra

    Your deployment pulls each release from Verra. Health alerts without content go to our on-call team, and our team reaches admin tools over a private connection your firewall allows.

  • Updates

    Updates arrive as releases that our team approves, each one tested first on a deployment built like yours.

Would you rather we host Verra? See Hosted by Verra

Book a Walkthrough for Your IT Team

Request a Demo