Back to Security & Privacy

Deployment Options

Contract Connection supports multiple deployment architectures to meet different security requirements.

Option 1: Cloud Hosted

Default

Best for: Quick setup, small-medium teams

A fully managed cloud deployment. All infrastructure, updates, and maintenance is handled automatically so users can focus on reviewing contracts.

Features

  • No infrastructure to manage
  • Automatic updates and improvements
  • Data encrypted at rest and in transit
  • AI providers configured to not train on your data
  • High availability architecture

Technical Details

Embedding Model
OpenAI text-embedding-3-large
Vector Database
Encrypted, isolated per tenant
LLM
OpenAI GPT-4 / Anthropic Claude
Hosting
AWS US-East (configurable regions supported)
Data Flow
Your docs Cloud servers (encrypted) AI API (no training) Back to you

Option 2: Bring Your Own API Keys (BYOK)

Popular

Best for: Cost control, existing AI provider accounts

Use your own AI provider accounts. Your API keys, your billing, your data policies apply directly. Maximum control over AI costs.

Features

  • Use your existing AI provider accounts
  • Direct billing relationship with AI provider
  • Your organization's data policies apply
  • Easy to configure in Settings
  • Switch providers anytime

Technical Details

Embedding Model
Your OpenAI / Azure / Anthropic account
Vector Database
Our infrastructure (encrypted) or yours
LLM
Your API keys, your billing
Hosting
Our cloud + your AI accounts
Data Flow
Your docs Cloud servers YOUR AI account Back to you

Supported AI Providers

OpenAI
GPT-4, GPT-4 Turbo, GPT-4o
Anthropic
Claude 3 Opus, Sonnet, Haiku
Azure OpenAI
For Azure account holders
Google Vertex AI
Gemini Pro, Gemini Ultra
AWS Bedrock
Claude, Titan, Llama

Setup Steps

  1. Go to Settings → LLM Settings
  2. Select your AI provider from the dropdown
  3. Enter your API key (stored encrypted)
  4. Select your preferred model
  5. Done! All AI calls now use your account

Option 3: On-Premises / Private Cloud

Self-Hosted

Best for: Maximum security, regulated industries, air-gapped environments

Run Contract Connection entirely within your own infrastructure. No data ever leaves your network. Perfect for highly regulated industries or organizations with strict data sovereignty requirements.

Features

  • Data NEVER leaves your network
  • No external API calls
  • Full control over infrastructure
  • Air-gap compatible
  • Use local LLMs (Llama, Mixtral, etc.)
  • Integrate with your security tools

Technical Details

Embedding Model
Local (BGE, E5, Instructor, or custom)
Vector Database
Self-hosted (Chroma, Milvus, Qdrant, pgvector)
LLM
Local (Llama 3, Mixtral, Mistral, or custom)
Hosting
Your infrastructure (Docker/Kubernetes)
Data Flow
Your docs Your servers Your LLM Your users (nothing external)

Infrastructure Requirements

Category Specification
Compute GPU server (NVIDIA A100 or H100 recommended)
Memory Minimum 64GB RAM (128GB recommended)
Storage 500GB+ SSD (depends on document volume)
Container Docker 20+ or Kubernetes 1.24+
OS Ubuntu 22.04 LTS or RHEL 8+

Supported Local LLMs

Llama 3 70B
Recommended for quality, requires A100
Llama 3 8B
Lighter weight, good for testing
Mixtral 8x7B
Good balance of speed and quality
Mistral 7B
Fast, lower resource requirements
Custom/Fine-tuned
Bring your own model

Feature Comparison

Feature Cloud BYOK On-Prem
Setup Time Minutes Minutes Days
Infrastructure Management Managed Managed Self-Managed
Data Location Cloud Cloud Your Infrastructure
AI Provider Included Your Account Local LLM
External API Calls Yes (secure) Yes (your accounts) None
Air-Gap Compatible
SSO / SAML
Audit Logs
Custom Data Retention Configurable Configurable Full Control
Help
On This Page