---
title: "BYOC Deployment"
description: "Stream processing in your cloud account. Data never leaves your VPC. Ververica manages the platform while you keep full control of your data."
lastUpdated: 2026-10-14T09:40:33.000Z
source_url:
  html: "https://www.ververica.com/product/deployment/byoc"
  md: "https://www.ververica.com/product/deployment/byoc.md"
---

# Your Cloud, Our Platform. Data Never Leaves Your VPC.

**Available on: AWS, Azure, Google Cloud (Soon)**

Ververica runs in your cloud account. You keep full data sovereignty. We manage the platform. Zero data egress. Zero shared tenancy.

## What is Ververica BYOC deployment?

Ververica BYOC (Bring Your Own Cloud) runs the streaming data plane inside your own AWS or Azure account, so your data stays in your network and in the region you choose. Ververica operates the platform remotely through a secure control plane that exchanges only metadata, and handles upgrades, patching, scaling and monitoring.

## Data Sovereignty

### European Company

Your contract is with Ververica GmbH, headquartered in Munich, Germany.

### Built for GDPR Requirements

Data processing in your account, your region.

### Built for DORA Requirements

ICT risk management with full visibility.

## Key Benefits

Customer-managed KMS for all data at rest. TLS 1.3 for all data in transit. You control key rotation, access policies, and audit logging.

Ververica handles upgrades, patching, scaling, and monitoring. Your team focuses on applications, not infrastructure. Platform SLA of 99.99%.

Data stays in your network. No cross-cloud data transfer fees. No bandwidth charges for moving data to a third-party environment.

Supports GDPR, DORA, PCI DSS, HIPAA and sector-specific requirements. Data stays in the region you choose. Audit trails for every operation. Your compliance team controls the evidence.

Data never leaves your cloud account. Processing, storage, and state management execute inside your VPC. No data egress. No exceptions.

## Features

- Single-tenant deployment
- Network isolation
- Use existing cloud credits
- Custom compliance
- Choose region/AZ
- BYOK encryption