| Where it runs | Your cloud: Kubernetes or Docker hosts | Hosted by us, multi-tenant, each org's data isolated |
| Database | Your Postgres 17 with pgvector | Run by us |
| Model provider | Your Anthropic key, or Claude through your AWS account | Your Anthropic key, encrypted at rest. No fallback to a platform key. |
| Embeddings | Voyage AI, under your own key | Decided at SaaS launch |
| GitHub access | A token you issue, with repo scope | GitHub App, granted per repo |
| Sign-in | Your OpenID Connect provider. Required for shared installs. | Per-org SSO, with members and roles |
| MCP for your agents | Run it inside your network. No built-in auth on HTTP yet. | Hosted, authenticated endpoint |
| Spend control | USD caps per run, chat query and drafting session | Plus organisation-level spend caps and billing |
| Merge policy | Built-in supervisor gates. Per-org policies Coming soon | Per-org configurable merge policies |
| Code host | GitHub | GitHub |