Pinecone BYOC: Pinecone in your AWS, GCP, or Azure account, no vendor access
2/19/2026
Introduces Pinecone Bring Your Own Cloud (BYOC), a new capability allowing the Pinecone data plane to run within a customer's AWS, GCP, or Azure account. This enables a zero-access operating model where Pinecone does not require inbound network access to the customer's cloud account or cluster. The system utilizes a split-plane architecture with a customer-hosted data plane and a Pinecone-managed control plane. Control plane operations are handled via an outbound-only, pull-based model, and data plane requests are served directly within the customer's VPC. It offers public or private connectivity options (AWS PrivateLink, GCP PSC, Azure Private Link) and supports single-namespace Dedicated Read Nodes (DRN) indexes. Deployment is facilitated through a self-serve kit and Pulumi project.