Pinecone BYOC: Pinecone in your AWS, GCP, or Azure account, no vendor access

Introduced Pinecone Bring Your Own Cloud (BYOC) for Enterprise users in public preview. BYOC enables the Pinecone data plane to run within a customer's AWS, GCP, or Azure VPC with a zero-access operating model. This means Pinecone does not require SSH, VPN, or inbound network access to the customer's cloud account, VPC, or cluster. Control plane operations are pulled outbound via TLS, and data plane requests are served directly from within the customer's VPC. Operational metrics and traces are sent to Pinecone for monitoring, while vectors, metadata, and request payloads remain within the customer's cloud account. Connectivity options include public endpoints or private connectivity via AWS PrivateLink, GCP Private Service Connect, or Azure Private Link. Deployment is facilitated by a self-serve Pulumi kit. Currently supports single-namespace Dedicated Read Nodes (DRN) indexes.