> ## Documentation Index
> Fetch the complete documentation index at: https://docs.datafold.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Datafold Deployment Options

> Datafold operates every deployment, either in Datafold's cloud (multi-tenant or dedicated) or in your own AWS, GCP, or Azure account.

> [!NOTE]
>
> On `app.datafold.com`, `eu.datafold.com`, or a Classic Dedicated Cloud deployment? See [Classic Deployment Options](https://docs.datafold.com/classic/datafold-deployment/classic-deployment-options.md).

Datafold runs as a single container image backed by one PostgreSQL database, with no other datastores to operate. Datafold operates every deployment, and the app is available in three deployment options:

| Option | Infrastructure | Operated by | Tenancy |
| :- | :- | :- | :- |
| [Multi-tenant](#multi-tenant) | Datafold | Datafold | Shared |
| [Dedicated](#dedicated) | Datafold | Datafold | Single-tenant |
| [Customer-hosted](#customer-hosted) | Your cloud account | Datafold | Single-tenant |

## Multi-tenant

Our multi-tenant deployment is hosted and operated by Datafold in two AWS regions:

| Region Name | Region | URL |
| :- | :- | :- |
| US West (Oregon) | `us-west-2` | [https://us.datafold.com](https://us.datafold.com) |
| Europe (Ireland) | `eu-west-1` | [https://eub.datafold.com](https://eub.datafold.com) |

Sign-up is by invitation. Contact [sales@datafold.com](mailto:sales@datafold.com) and we'll send you a link to create your organization.

For additional security:

1. [IP Whitelisting](https://docs.datafold.com/security/securing-connections.md#ip-whitelisting): allow only Datafold's egress IP addresses to reach your data sources
2. Private connectivity (PrivateLink, VPC peering, SSH tunnel): contact [support@datafold.com](mailto:support@datafold.com) about options for multi-tenant organizations

## Dedicated

A single-tenant deployment for your organization, hosted and operated by Datafold in a Datafold-owned cloud account. Your deployment has its own hostname, application, and database, and Datafold handles upgrades and maintenance.

Contact [sales@datafold.com](mailto:sales@datafold.com) to discuss cloud provider and region.

## Customer-hosted

A single-tenant deployment in your own cloud account, operated by Datafold. Datafold deploys the app on your cloud's managed container platform and managed PostgreSQL, and handles upgrades and maintenance. The deployment is where our engineers conduct the migration from, so Datafold always has access to it.

Contact [sales@datafold.com](mailto:sales@datafold.com) to get started.

### What gets deployed

Datafold creates a complete deployment in a new network in your account: the container services, the database, secrets, TLS, and the load balancer.

Customer-hosted deployments can also run on your existing Kubernetes cluster (for example Amazon EKS or Azure AKS), on a Linux host with Docker, or in Databricks Apps.

> [tab] AWS
>
> | Component | Service |
> | :- | :- |
> | Compute | Amazon ECS on AWS Fargate |
> | Database | Amazon RDS for PostgreSQL 17 |
> | Ingress and TLS | Application Load Balancer with an AWS Certificate Manager certificate |
> | Secrets | AWS Secrets Manager |
> | Network | New VPC with private subnets and a NAT gateway |
> | Container registry | Amazon ECR |
> | Logs | Amazon CloudWatch Logs |
>
> **What you provide**
>
> * An AWS account for the deployment, and access for Datafold to deploy into it
> * A hostname in a DNS zone you control

> [tab] GCP
>
> | Component | Service |
> | :- | :- |
> | Compute | Cloud Run: a service for the web server and a worker pool for background work |
> | Database | Cloud SQL for PostgreSQL 17 |
> | Ingress and TLS | Global external Application Load Balancer with a Google-managed certificate |
> | Secrets | Secret Manager |
> | Network | New VPC with Cloud NAT |
> | Container registry | Artifact Registry |
> | Logs | Cloud Logging |
>
> **What you provide**
>
> * A GCP project for the deployment, with Owner (or equivalent) access for Datafold
> * A hostname in a DNS zone you control

> [tab] Azure
>
> | Component | Service |
> | :- | :- |
> | Compute | Azure Container Apps |
> | Database | Azure Database for PostgreSQL Flexible Server 17 |
> | Ingress and TLS | Container Apps ingress with a managed certificate |
> | Secrets | Azure Key Vault |
> | Network | New VNet with a NAT gateway |
> | Container registry | Azure Container Registry |
> | Logs | Azure Monitor Log Analytics |
>
> **What you provide**
>
> * An Azure subscription for the deployment (a dedicated subscription is recommended), with Owner, or Contributor and User Access Administrator, access for Datafold
> * A hostname in a DNS zone you control

On every cloud:

* **HTTPS only:** plain HTTP requests are redirected to HTTPS. You can use a certificate managed by your cloud provider or import your own.
* **Static egress IP:** outbound traffic leaves through a NAT gateway with a static IP address, which you can allow-list on your data sources and git provider.
* **High availability:** by default, the database runs as a single instance without a standby. A multi-zone configuration is available.

### Onboarding

**1. Prepare your cloud account**

Create the account, project, or subscription for the deployment and grant Datafold access to it.

**2. Datafold deploys the app**

Datafold creates the infrastructure and deploys the app into your account.

**3. Create the DNS records**

Create the DNS records that Datafold provides for your hostname.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.