Who operates what in each deployment model?
Managed: Context operates, you govern policy. Your VPC: your cloud controls, operations shared per the design. On-premises and air-gapped: you operate.
In a managed deployment Context stands up and operates the platform for your workspace while your team governs policy and access. In your VPC the platform runs under your cloud controls, with operations shared as agreed in the deployment design. On-premises and air-gapped, you operate the infrastructure and Context configures updates and support for it.
In every mode agents take identity from your identity provider, every action is authorized and recorded, and credentials are brokered at run time. The comparison table lays out perimeter, operator, traces, and models side by side.
Written for it and security, deployment engineers, finance and procurement. Last reviewed 2026-09-15.
Related questions
Still need an answer?
Tell us what you were looking for and we reply within one business day.
Contact the team →Running a security review?
Documents, controls, and the request form live in the Trust Center.
Open the Trust Center →