Restate Cloud BYOC

Run Restate Cloud in your own cloud account with full data sovereignty and network isolation.

Restate Cloud BYOC (Bring Your Own Cloud) lets you run Restate environments within your own cloud account while benefiting from Restate’s managed control plane. Your data stays in your infrastructure, under your control.

Restate Cloud

Fully managed by Restate. No infrastructure to maintain. Best for getting started quickly.

BYOC

Restate manages the data plane, but it runs in your cloud account. Data sovereignty, network isolation, and compliance.

Self-hosted

You run and manage everything. Full control, full responsibility.

Why BYOC?

BYOC is designed for organizations that need:

• Data sovereignty — all data remains in your cloud account and chosen region
• Network isolation — Restate workloads run in your VPC with no inbound access required
• Compliance — meet policies that require workloads to remain within customer-controlled infrastructure
• Existing commitments — use your cloud provider savings plans, reserved instances, and negotiated pricing

How it works

A BYOC deployment has three layers:

1. Foundation — You deploy a cloud-native template (CloudFormation on AWS, ARM on Azure) into your account. This creates the networking, secrets store, and a deployment agent that manages the rest of the infrastructure on Restate’s behalf.

2. Infrastructure — The deployment agent provisions a Kubernetes cluster, container registry, certificate management, and supporting infrastructure. This happens automatically after the foundation is deployed.

3. Application — Restate data plane components are deployed into the cluster: the ingress proxy, tunnel, Restate operator, and monitoring stack. Environment creation, updates, and scaling are managed by Restate’s control plane.

The deployment agent uses an egress-only polling model — it reaches out to Restate’s control plane to check for work, rather than receiving inbound commands. Restate never has direct inbound access to your infrastructure.

For details on the security properties of each layer, see Security Model.

Supported cloud providers

Cloud Provider	Status
AWS	Generally available
Azure	Generally available
GCP	Coming soon

Get started

BYOC deployments are set up in collaboration with the Restate team. To get started:

Contact Restate

Reach out to discuss your requirements and begin onboarding.