Use the assisted AWS tier when the customer needs to own the account, database, and keys but wants us to install the stack. Use full self-hosting when their team will operate the whole deployment lifecycle.
Bring your own keys
Reference your own OpenAI, Anthropic, Gemini, or compatible gateway secrets from your vault and rotate on your schedule.
Use AskMasked managed keys
Fallback option for fast rollout, with managed lifecycle and audited access controls.
Clean model switching
Update provider and model values without changing user prompts or redaction logic.
Install manifest
The manifest defines ownership, required customer inputs, environment contract, smoke checks, and billing telemetry without exposing provider keys, database passwords, or protected client terms.