The shared responsibility matrix
The table shows the default split. Your contract carries the version agreed with your team.
| Area | Pilae Cloud | On premises |
|---|---|---|
| Datacentre, power, cooling, physical security | Pilae, through its hosting providers | You |
| Hardware and its replacement | Pilae, with the hosting provider | You |
| Operating system and hardening | Pilae | Pilae |
| Private network and the gate on port 443 | Pilae | Pilae, with your firewall rules |
| App installation and configuration | Pilae | Pilae |
| Updates and security fixes | Pilae plans and applies, you approve | Pilae plans and applies, you approve |
| Backups and monthly restore tests | Pilae | Pilae, to the target you choose |
| Monitoring and alerting, around the clock | Pilae | Pilae |
| Incident response, within your plan’s hours | Pilae | Pilae, with your on-site staff for hardware |
| Users, roles and single sign-on | You, with Pilae’s help | You, with Pilae’s help |
| Data in each app | You | You |
| Approval of changes and maintenance windows | You | You |
| Connections to outside services | You decide, Pilae configures | You decide, Pilae configures |
Pilae Cloud: we run the stack
In Pilae Cloud your apps run on dedicated machines in the region you choose, from any of 12 regions, six of them in Switzerland and the EU. Pilae is responsible for those machines and everything on them. The datacentres are ISO 27001-certified. Your team uses the apps, manages its users and approves the changes the Pilae Agent proposes.
Monitoring and alerting run around the clock on every plan. Incident response follows your plan: business hours on Essential, around the clock on Enterprise. See pricing for what each plan includes and the service level agreement for the 99.9% monthly availability commitment.
On premises: you host, we operate
On your premises the building and the hardware are yours. Pilae runs everything from the operating system up, through the private network, with the same monitoring, backups and audit log as in Pilae Cloud. A hybrid deployment uses both columns, app by app.
What stays yours in every model
Your data, your users and your approvals. You decide who can sign in, what goes into each app and when changes run. Pilae processes your data only on your instructions, as set out in the data processing agreement. For the operations service behind the Pilae column, see managed operations.