Meet TAI - Industrial AI grounded in your digital twin

Deployment options for every security posture

Treedis supports three deployment models, so organizations can align the platform with their security, compliance and data residency requirements. Every model delivers the same core platform: digital twins, Connected Worker workflows and Treedis AI (TAI), deployed in the environment your requirements call for.

Treedis Cloud

A fully managed, enterprise-grade platform hosted on AWS.

Treedis Cloud is our managed multi-tenant environment, built to the AWS Well-Architected Framework. Treedis is responsible for infrastructure, availability, patching, monitoring and security operations.

Recommended for

Standard enterprise deployments, pilots and multi-site rollouts that need rapid time-to-value.

Compliance
ISO/IEC 27001 certified and GDPR compliant, with a Data Processing Agreement (DPA) available on request.
Encryption
AES-256 encryption at rest across database and object storage, with key management through AWS KMS. All data is encrypted in transit using TLS.
Network security
Databases are isolated in a private VPC with no public internet exposure. The edge is protected by AWS WAF, rate limiting and bot protection.
Identity and access
SAML 2.0 single sign-on (Microsoft Entra ID, Okta, Google Workspace and any SAML-compliant IdP), SCIM user provisioning, and role-based access control at workspace, project and asset level.
Availability and resilience
99.9% availability target, multi-Availability Zone architecture, automated compute and database scaling, and daily backups with 30-day retention.
Data residency
Platform infrastructure can be deployed to a customer-specified AWS region.
Tenant isolation
Logical tenant isolation at the application and database layers as standard. Dedicated single-tenant environments are available.
Customer network requirements
Outbound HTTPS (443) only. No inbound firewall changes are required.

Customer Cloud

Treedis deployed within your own cloud tenancy and security perimeter.

Treedis is fully containerized and deployed into your own cloud environment, on any cloud provider, so the platform runs entirely inside your controlled environment. Your organization keeps ownership of the network boundary, encryption keys, logging and security controls. Treedis provides deployment, configuration and ongoing platform support.

Recommended for

Regulated industries such as pharmaceuticals, energy and financial services, where security policy requires third-party platforms to run inside the organization’s own cloud environment.

Containerized platform
Runs on any cloud provider, so it fits the cloud you already use.
Network isolation
Deployed within your own private network, under your existing network segmentation and security policies.
Private connectivity
Integration with enterprise systems such as CMMS, EAM, ERP, historians and IoT platforms over private link or site-to-site VPN, so no traffic crosses the public internet.
Key management
Encryption keys are managed in your own key management service.
Security operations
Your monitoring, logging, SIEM and governance tooling apply to the deployment.
Identity
Integrates with your enterprise identity provider over SAML 2.0 and SCIM.
Delivery
Deployed and supported by Treedis engineering under a defined scope.

On-Premises

A fully self-hosted deployment for restricted and air-gapped environments.

For environments where data can’t leave the facility or touch the public cloud, Treedis can be deployed on customer-owned infrastructure. Each cloud-dependent component is replaced with a self-hosted equivalent, so the deployment runs with no external service dependencies.

Recommended for

Defense, government, critical infrastructure and other high-security sites that need full on-site data sovereignty.

Infrastructure
Deployed on customer-owned servers in your data center.
AI
Treedis AI runs on a locally hosted language model, so no data is sent to external AI providers.
3D spatial data
Digital twins are hosted locally using Treedis Gaussian Splat technology, with no dependency on externally hosted 3D services.
Network
Runs entirely within your network perimeter and supports air-gapped operation.
Delivery
Scoped, deployed and supported in partnership with Treedis engineering.

Deployment comparison

The same platform in each model. What changes is where it runs, who manages it, and who holds the keys.

CapabilityTreedis CloudCustomer CloudOn-Premises
Hosting environmentTreedis-managed AWSYour own cloud, any providerYour data center
Infrastructure managementTreedisTreedis, within your environmentCustomer, with Treedis support
TenancyMulti-tenant (logical isolation) or dedicated single-tenantDedicatedDedicated
Data residencyCustomer-specified AWS regionYour selected cloud regionOn-site
Encryption key ownershipTreedis (AWS KMS)Customer (your key management service)Customer
Network connectivityOutbound HTTPS (443)Private Link / VPNInternal network, air-gap capable
3D digital twinsMatterport-hostedMatterport-hosted or locally hostedLocally hosted
Treedis AI (TAI)Full capabilityFull capabilityLocally hosted AI model
Time to deployDaysScoped per engagementScoped per engagement

Discuss your deployment requirements

Our solutions engineering team will review your security, compliance and infrastructure requirements and recommend the deployment model that fits your organization.

Contact our team

We use cookies to improve your experience and analyse site traffic. Cookie policy.

DeclineAllow