BlogsPineconeBring Your Own Cloud (BYOC)

Bring Your Own Cloud (BYOC)

Bring Your Own Cloud (BYOC)

3
posts
2023–2026

Pinecone BYOC allows customers to run the Pinecone data plane within their own AWS, GCP, or Azure accounts, offering a zero-access operating model. This ensures data residency and meets strict security requirements by keeping vectors and query execution within the customer's VPC. The architecture splits into a customer-hosted data plane and a Pinecone-managed control plane. Operations are managed via an outbound-only, pull-based model, and data plane requests are served directly within the customer's cloud. This post announces general availability of Pinecone on Azure, enabling customers to deploy Pinecone within Azure regions, further enhancing performance, simplifying procurement, and meeting enterprise readiness requirements.

2026

Pinecone BYOC: Pinecone in your AWS, GCP, or Azure account, no vendor access

2/19/2026

Introduces Pinecone Bring Your Own Cloud (BYOC), a new capability allowing the Pinecone data plane to run within a customer's AWS, GCP, or Azure account. This enables a zero-access operating model where Pinecone does not require inbound network access to the customer's cloud account or cluster. The system utilizes a split-plane architecture with a customer-hosted data plane and a Pinecone-managed control plane. Control plane operations are handled via an outbound-only, pull-based model, and data plane requests are served directly within the customer's VPC. It offers public or private connectivity options (AWS PrivateLink, GCP PSC, Azure Private Link) and supports single-namespace Dedicated Read Nodes (DRN) indexes. Deployment is facilitated through a self-serve kit and Pulumi project.

2025

Bringing the leading vector database to your cloud

2/20/2025

This post announces the public preview of Pinecone BYOC, extending support to AWS, GCP, and Azure. It details the zero-access operating model, self-serve deployment, and the architecture comprising a customer-hosted data plane and a Pinecone-managed control plane. Key benefits like enhanced security, compliance, enterprise-grade access controls, private multi-tenant regions, flexible AWS region deployment, and cost savings through existing cloud discounts are highlighted. The post also elaborates on the principle of least privilege, RBAC, and secure access for maintenance via customer-controlled VPNs.

2023

Run Pinecone on Azure

7/13/2023

This post announces the general availability of Pinecone on Azure, allowing customers to deploy Pinecone within Azure regions. This expands the existing Bring Your Own Cloud (BYOC) offering, enabling users to run the Pinecone data plane within their Azure accounts. The integration aims to improve performance by reducing latency, simplify procurement, and meet enterprise security and infrastructure requirements by leveraging Azure's cloud environment.