Deployment Options
From fully managed SaaS to air-gapped on-premises installations. Deploy IFO4 wherever your security and compliance requirements demand.
SaaS Multi-Tenant
Fully managed by IFO4 with logical data isolation between tenants. Automatic updates, scaling, and maintenance. Fastest time-to-value with zero infrastructure management.
Best for: Organizations that want maximum speed to value with enterprise-grade security and data isolation.
- ✓Zero infrastructure management
- ✓Automatic updates and patches
- ✓Elastic scaling
- ✓Fastest deployment (< 1 day)
- ✓99.99% uptime SLA
- •Shared infrastructure
- •Standard data residency (US/EU)
Dedicated Tenant
Your own isolated IFO4 instance with dedicated compute, storage, and network resources. Custom data residency, enhanced security controls, and dedicated encryption keys.
Best for: Financial services, healthcare, and organizations with strict data isolation requirements.
- ✓Dedicated infrastructure
- ✓Custom data residency
- ✓Customer-managed encryption keys
- ✓Enhanced network isolation
- ✓Custom maintenance windows
- •Higher cost than multi-tenant
- •1-2 week deployment
Hybrid Deployment
IFO4 control plane runs in our cloud while the data plane operates within your VPC. Sensitive billing data and cloud credentials never leave your environment.
Best for: Organizations that want SaaS convenience with data sovereignty guarantees.
- ✓Data stays in your VPC
- ✓Cloud credentials never shared
- ✓IFO4-managed control plane
- ✓Automatic updates for UI/API
- ✓Customer-controlled data plane
- •Requires VPC configuration
- •Some features require cloud connectivity
On-Premises
Complete IFO4 platform deployed inside your data center. Full sovereignty over all data, compute, and network. Supports air-gapped environments with no external connectivity.
Best for: Government agencies, defense organizations, and environments with classified data requirements.
- ✓Complete data sovereignty
- ✓Air-gap compatible
- ✓No external connectivity required
- ✓Custom security hardening
- ✓Full compliance control
- •Customer-managed infrastructure
- •Manual update process
- •Longer deployment timeline
Deployment model comparison
Infrastructure requirements by deployment
How your data flows through IFO4
Data Ingestion
Cloud billing APIs (CUR, Cost Management API, BigQuery Export) are polled on a configurable schedule. Data is encrypted in transit with TLS 1.3 and validated against source checksums.
Normalization
Raw billing data is normalized across providers into a unified cost model. Discounts, credits, and taxes are applied consistently. Currency conversion happens at ingestion time using configurable exchange rates.
Enrichment
Normalized data is enriched with resource metadata, organizational hierarchy, tagging taxonomy, and custom cost allocation rules. Missing tags are inferred using ML-based tag prediction.
Analysis
Enriched data flows through the optimization engine for rightsizing analysis, reservation recommendations, anomaly detection, and forecasting. Results are stored in the time-series database.
Presentation
Analyzed data is served to dashboards, reports, APIs, and integrations. Data is cached at multiple levels for sub-second query performance across the UI and API.
Action
Optimization recommendations can be applied directly via cloud provider APIs, forwarded to ITSM systems, or exported to CI/CD pipelines for automated implementation.
Need help choosing?
Our solutions architects will evaluate your requirements and recommend the optimal deployment model.
Talk to Architecture Team