/ sovereign
Some workloads cannot leave a building, a country, or a private network. Avahana's Hollow Fleet architecture lets you run a region anywhere there is a server and a power outlet — under the same control plane, with the same APIs.
Pick the model that matches your data residency and operational reality.
Attach your AWS, GCP, or on-prem servers to our control plane. We manage them as if they were ours — same scheduling, same observability, same APIs. You retain ownership of the metal and the data.
/ for
Growth startups optimizing cost; enterprises with reserved instances or sunk capex.
Deploy the entire Avahana control plane into your private network or air-gapped environment. Annual license, no calls home, no telemetry leaves your perimeter.
/ for
Defense, government, regulated finance, healthcare with strict data-locality requirements.
Choose where your workloads and data physically live. We do not silently replicate across borders. Region selection is explicit and enforced by the scheduler.
/ for
Any team subject to DPDP, GDPR, or sector-specific data localization rules.
We are honest about what's shipped, what's in audit, and what's planned. No vague badges.
| Framework | Status | Detail |
|---|---|---|
| TLS in transit | Shipped | TLS 1.3 default for all customer endpoints. |
| Encryption at rest | On roadmap (post-MVP) | Per-tenant key isolation; LUKS / NVMe SED on Avahana metal. |
| DPDP Act (India) | Targeting compliance for GA | Data residency, consent flows, breach notification protocol. |
| GDPR (EU) | Targeting compliance for GA | DPA available; subprocessor list maintained publicly. |
| SOC 2 Type II | Audit planned | Target audit window: post-public-beta. |
| HIPAA | On request | Sovereign tier only — handled per-deal. |
These are not self-serve options. Reach out and we will schedule a working session with engineering, not just sales.