Vera AI

Deployment

Run Vera AI where your security team says yes. Three methods: SaaS on our shared cloud, live the same day; SaaS on your own dedicated instance; or your own customized environment, connected to your systems and shaped to your workflows and layout. Same platform, same reports, different boundaries.

SaaS, shared

our managed cloud, live the same day, on every plan

SaaS, your own

a single tenant instance we run only for you, in the region you choose

Your own customized environment

inside your boundary, connected to your systems, your workflows and your layout

01 · SAAS, SHARED

Available today · every plan

Our managed cloud. Upload today, benchmark today.

How nearly all of our customers run Vera AI. We operate the application, the database, storage and backups. Your data is isolated in the database with row level security, contract files live in private encrypted storage behind short lived signed links, and every view and download lands on the audit trail.

WHY TEAMS CHOOSE IT

• Live the same day, no infrastructure project • Always current: features, price data and security fixes ship continuously • Full access to the Benchmark Library, every app and the quarterly price index • Lowest cost of the three methods • Enterprise controls on by default: SSO, SCIM, MFA, audit logging

TRADE-OFFS TO WEIGH

• Infrastructure is shared, with isolation enforced in the database rather than by separate hardware • Hosting region is US or EU, chosen at onboarding; other regions need your own instance • Layout and workflows are the platform's standard ones

SaaS, shared, at a glance
Who operates it	We do. Zero maintenance on your side.
Where contract files live	Private encrypted cloud storage, no public URLs, signed links that expire in about a minute.
Tenant isolation	Row level security in the database, tested with real cross organization attempts.
Identity	SAML and OIDC single sign on, SCIM provisioning, TOTP multi factor.
Integrations	The standard integrations, the API and MCP.
Updates	Continuous. New benchmarks and features appear without any action from you.
Time to first benchmark	Same day.

02 · SAAS, YOUR OWN

Enterprise agreements

Your own instance. Nothing shared, not even the database.

A single tenant deployment we provision and operate only for you: a dedicated database, dedicated file storage, dedicated encryption keys and your own subdomain or custom domain, hosted in the region your policy requires. It meets data residency mandates and security policies that rule out a shared database however it is isolated.

WHY TEAMS CHOOSE IT

• No shared infrastructure at the data layer: your database, your storage, your keys • Choose the hosting region, for example EU only processing • Your own domain and a maintenance window you agree with us • Still zero operations work for your team • The full Benchmark Library and every app, identical to the shared cloud

TRADE-OFFS TO WEIGH

• Priced as a dedicated environment, above the standard plans • Provisioning takes days, not minutes • Updates arrive on an agreed cadence rather than continuously

SaaS, your own, at a glance
Who operates it	We do, on infrastructure provisioned only for you.
Where contract files live	Your dedicated storage, encrypted with your own keys, in your chosen region.
Tenant isolation	Physical: a separate database and storage, plus the same row level policies inside it.
Identity	SAML and OIDC single sign on, SCIM provisioning, TOTP multi factor, your domain.
Integrations	The standard integrations, the API and MCP.
Updates	Managed by us on an agreed maintenance cadence.
Time to first benchmark	Days.

03 · YOUR OWN CUSTOMIZED ENVIRONMENT

By arrangement

Your environment, built around how you work.

The platform runs inside your own boundary, in your cloud account or data center, or as a hybrid where contract files never leave your network. Because the environment is yours, it can be shaped to fit: connected to your own systems, running your workflows, and laid out the way your teams work.

WHAT YOU CAN CHANGE

Integrations with your own systems

Connected to what you already run:

ERP and procurement suites
Contract repositories and document stores
ITSM and software asset tools
Finance systems and data warehouses
Your identity provider
Your SIEM

Your own workflows

Intake, approval chains, renewal routes, sign offs and notifications built to your policy, so work moves the way your organization already decides.

Your own layout

Navigation, home screens, the tools each team sees, your branding, and the templates your reports and briefs carry, shaped to how your teams work.

Your own rules and data

Your clause standards, price books, approval thresholds and internal benchmarks applied throughout, beside the market data.

TWO WAYS TO RUN IT

Fully inside your boundary

We deliver the platform as versioned releases your team deploys into your own cloud account or data center, with our runbooks and support. Nothing crosses the perimeter, which meets sovereignty and air gap requirements no cloud option can.

Hybrid, files stay home

A lightweight connector reads contracts inside your network and sends only the commercial figures your team approves to our cloud for benchmarking. The documents never cross your boundary, and the market comparison stays live.

WHY TEAMS CHOOSE IT

• Integrations built to your own systems, not only the standard ones • Your workflows and approval rules inside the platform • Your layout, branding and report templates • Complete control of infrastructure, keys and monitoring • Audit events stream straight into your own SIEM

TRADE-OFFS TO WEIGH

• Scoped as a joint engagement: the highest total cost and the longest rollout • Your team owns operations when the platform runs fully inside your boundary • Features arrive as versioned releases, and customizations are carried forward with each one • Fully disconnected, market data ships as periodic snapshots

Your own customized environment, at a glance
Who operates it	Your team, with our runbooks, releases and support; on the hybrid route we run the cloud side.
Where contract files live	Your infrastructure, or your network with only approved figures shared.
Integrations	Built to your own systems, scoped with you.
Workflows and layout	Yours: approval chains, routes, navigation, branding and templates.
Updates	Versioned releases you apply on your own schedule.
Benchmark network	Periodic snapshots fully inside your boundary; live for approved figures on the hybrid route.
Time to first benchmark	Months, scoped together as an engagement.

SIDE BY SIDE

The three methods, compared.

	SaaS, shared	SaaS, your own	Your own customized environment
Best for	Most teams. Fast start, lowest cost, always current.	Residency mandates and policies that rule out shared infrastructure.	Sovereign, air gapped or deeply integrated estates, and teams that want the platform shaped to them.
Who operates it	Us	Us, on infrastructure only you use	Your team with our support, or us on the hybrid cloud side
Where contract files live	Our cloud, private and encrypted	Your dedicated instance, region of your choice	Your infrastructure or your network
Data residency choice	US or EU, chosen at onboarding	Yes, you choose the region	Wherever you run it
Integrations	Standard integrations, API and MCP	Standard integrations, API and MCP	Built to your own systems
Workflows and layout	The platform's standard ones	The platform's standard ones	Yours: workflows, layout, branding, templates
Updates	Continuous	Managed, agreed cadence	Versioned releases on your schedule
Benchmark network	Full	Full	Snapshots inside your boundary, live for approved figures on the hybrid route
SSO, SCIM, MFA	Included	Included	Via your identity provider
Audit logging	Full trail, SIEM streaming	Full trail, SIEM streaming	Full trail, direct to your SIEM
Operational work for you	None	None	From one small connector to the full stack
Typical time to first benchmark	Same day	Days	Weeks to months
Availability	Every plan, today	Enterprise agreements	By arrangement

We describe availability honestly. The shared cloud is live for every customer today. Your own instance and a customized environment are scoped with your security team as part of an Enterprise conversation, and we will tell you plainly what is ready now and what is on the roadmap.

EVERY DEPLOYMENT, EVERY SURFACE

However it runs, your team can work from anywhere.

The deployment model decides where your data lives. It does not limit how your team reaches it.

Web app

The full workspace in any browser. Nothing to install.

Desktop app

VendorBenchmark Desk, the native Windows app, installed from the workspace download page.

Mobile companion

Alerts, reports, and Ask on iOS and Android, in early access.

Browser extension

A verdict on any quote, right where you receive it.

Slack and Teams

Ask Vera for benchmarks and renewal answers inside your channels.

API and MCP

Wire benchmarks into your own tools and AI assistants with organization API keys.

Not sure which one fits? Bring your security team.

We will walk through the options against your requirements, honestly. Start with how we secure the platform.

Talk to us →