Zilliz Cloud Introduces Advanced BYOC-I Solution for Ultimate Enterprise Data Sovereignty

The Enterprise AI Dilemma: Innovation vs. Control

As AI adoption accelerates across industries, many organizations struggle to balance powerful vector database capabilities with data sovereignty requirements. This is especially challenging for regulated industries like finance, healthcare, and education, where data security cannot be compromised.

Zilliz Cloud BYOC (Bring-Your-Own-Cloud) eliminates this dilemma entirely. As the industry's only vector database offering that enables organizations to run sophisticated AI workloads directly where their data resides, while maintaining complete infrastructure control, it is transforming how enterprises approach AI deployment in security-conscious environments.

Today, we are proud to unveil Zilliz Cloud BYOC-I—an enhancement to our BYOC solution, specifically designed for enterprises with the most stringent security and compliance requirements.

Understanding Zilliz Cloud BYOC: Flexible Deployment Options for Every Security Posture

With the latest addition of BYOC-I, our BYOC platform now offers two deployment models to match your specific security and operational requirements. Let's explore these options to help you determine which best fits your organization's needs.

BYOC (Standard): Balanced Control with Operational Simplicity

Figure 1- Zilliz Cloud BYOC (the standard mode)

Figure 1: Zilliz Cloud BYOC (the standard mode)

In our standard BYOC model, Zilliz Cloud takes a cross-account role to provision and manage data-plane resources within the customer's cloud environment. This architecture:

• Keeps all data within your VPC and account

• Allows Zilliz to dynamically scale resources based on your commands

• Delivers the same scaling and management features available in our Zilliz Cloud SaaS offering

• Establishes secure communication between Zilliz Cloud and your VPC through encrypted built-in reverse tunnels

• Offers optional AWS PrivateLink support for enhanced security

• Eliminates expensive data transfer costs by processing AI workloads where your data resides

This deployment option is ideal for organizations that want to maintain data sovereignty while minimizing infrastructure management overhead.

BYOC-I (New): Full Control for Stringent Security Requirements

Figure 2- Zilliz Cloud BYOC-I (the infra-controlled mode)

Figure 2: Zilliz Cloud BYOC-I (the infra-controlled mode)

Our new BYOC-I (BYOC-Infra) architecture elevates security to the next level by eliminating external control that relies on a cross-account IAM role, granting you complete authority over your infrastructure. This approach:

• Maintains all data within your VPC and account
• Allows you to take responsibility for all data-plane resources
• Prevents Zilliz from accessing any infrastructure resources without your explicit permission
• Maintains secure communication through the same built-in reverse tunnels with optional PrivateLink support

BYOC-I is perfect for organizations in heavily regulated industries like finance and healthcare, where full control over infrastructure and data access is non-negotiable.

Standard BYOC vs. BYOC-I

Feature	Standard BYOC	BYOC-I
Data remains in the customer VPC	✓	✓
Infrastructure in the customer account	✓	✓
Secure reverse tunnel communication	✓	✓
PrivateLink support	✓	✓
Zero data transfer costs	✓	✓
Control plane access model	Cross-account role	BYOC Agent only
Infrastructure resource control	Zilliz managed	Customer controlled
Maintenance blocking capability	Balanced	Full

Both options deliver high-performance vector search capabilities without compromising on security, compliance, or operational efficiency. By keeping your valuable data and AI assets in your own cloud environment, Zilliz Cloud BYOC eliminates the traditional trade-off between innovation and control.

Enhanced BYOC Features: Greater Visibility and Control

Both deployment options now include powerful new capabilities designed to meet enterprise requirements:

Comprehensive Audit Logging

Our Data Plane Audit Log feature tracks all vector searches, index management operations, and data manipulation activities, providing:

• Complete data sovereignty with all data plane audit logs remaining within your VPC environment
• Detailed logs of all auditable data plane actions
• Direct streaming to your own cloud object storage (e.g., AWS S3)
• Organized log storage with separate folders per cluster
• Delivery within five minutes of completed actions

Flexible Infrastructure Configuration

Our latest release introduces granular control over infrastructure resources. You can now define instance types and quantities for key service groups, including Search Services, Other Database Components, and Core Support Services.

To simplify configuration, we have also introduced a series of predefined project sizes—Small, Medium, Large, and X-Large—designed to support varying workloads, ranging from millions to billions of entities. This approach allows you to quickly select the option that best matches your requirements without needing to configure each component individually. All the configuration optimizations make it possible to deploy a complete BYOC project with just a few clicks, while still maintaining the option for fully custom settings when needed.

Enabling Secure, Scalable AI Across Industries

With Zilliz Cloud BYOC, your security teams transform from gatekeepers into enablers, empowering AI adoption without compromising your organization's risk posture. This means you can deploy advanced vector search applications while meeting the strictest compliance mandates.

Whether you choose BYOC or BYOC-I, you gain access to Zilliz Cloud's industry-leading capabilities:

• Scalable Vector Search: Handle billions of vectors with sub-10ms latency

• Hybrid Search Support: Combine vector, text, and metadata search seamlessly

• Advanced Compression: Optimize storage and compute with techniques like Int8 compression and RabitQ 1-bit quantization

• Open Source Foundation: Built on the most widely adopted open-source Milvus, trusted by 10,000+ organizations worldwide

Real Business Impact Across Industries

The Zilliz Cloud BYOC solution is already enabling AI transformation in organizations that previously faced seemingly insurmountable compliance barriers:

• Financial Services: Deploy fraud detection AI models while keeping sensitive transaction data within controlled environments

• Healthcare: Implement advanced diagnostic systems while maintaining strict HIPAA compliance

• Education: Utilize AI-enhanced learning tools while protecting student data privacy

• E-commerce: Deploy personalization engines while adhering to global consumer data protection regulations

Unlike legacy databases with limited vector capabilities or self-hosted vector databases that require extensive operational resources, Zilliz Cloud BYOC offers a unique combination of performance, control, and operational simplicity.

Getting Started with Zilliz Cloud BYOC

Ready to transform your AI deployment strategy? Here's how to begin:

1. Explore our documentation: Learn more about BYOC solutions

2. Contact our sales team: Reach out to enable these features for your organization

3. Follow our deployment guides: Step-by-step instructions for BYOC on AWS or BYOC-I on AWS

​​Take control of your AI infrastructure today while accelerating your path to production-ready vector search applications.