For the security and architecture review.

beacon.build runs on Google Cloud in Zürich (europe-west6), via our hosting provider Northflank, so your data stays Swiss-hosted by default. If your organization needs the platform inside its own perimeter, on-prem deployment is available on request, agreed individually rather than self-serve.

Bring your own model and your own keys. Every model call runs on your own provider contract, never through us, and never against a bundled token quota we resell. When an agent calls a hosted model, that prompt goes to the provider you picked: a visible, deliberate choice, never a hidden default.

Access is role-based, and every agent acts under its own identity, not a shared service account: who did what, on which Spec, with which model, is traceable and live in the product. Single sign-on is on request: not built yet, set up as soon as your engagement needs it, and the platform is designed so adding it is straightforward.

A single-instance or on-prem deployment gets its own isolated environment: no shared tenancy, no shared token quota, no model lock-in. Two decisive human control points frame agent work (after the Spec, and before merge), with a human integrator as the sole merger, so nothing ships without an explicit go.

Our hosting provider, Northflank, holds SOC 2 Type 2 (details on request via their trust center); its infrastructure runs on Google Cloud in Zürich. A data processing agreement with Northflank is in progress. We answer security questionnaires and vendor assessments on request today; beacon. would pursue a certification such as ISO 27001 if a customer engagement required it, not before. Google Cloud publishes its own infrastructure-level certifications (see the source link below); those are Google’s, never a beacon. or Northflank claim.

Google Cloud publishes its own compliance and certification program for its underlying infrastructure. Google Cloud's compliance offerings

Seat pricing starts from 10 users. Single-instance deployments and org-wide site licenses are negotiated individually for your setup, not sold off a list price, so the contract reflects your actual deployment and volume.