You stop choosing between modern tooling and control of your data.
Most analytics platforms force a choice: modern tooling, or control of your data. Definite On-Prem refuses the tradeoff. You get the complete platform, ingestion, lakehouse, semantic layer, automations, data apps, and a real AI agent, running single-tenant inside infrastructure you own and your security team already trusts.
Under the hood: one Helm chart onto a Kubernetes cluster you control, a Postgres database you provision, and analytical data in your own object store. It is a purpose-built single-tenant distribution, dedicated entirely to your organization. Definite ships the software; you run it.
If your team runs Kubernetes, you can run Definite.
There is a standard Helm chart underneath, so nothing about this deployment is a black box: your team can audit it, script it, and fold it into existing IaC, with no lock-in. A Rust CLI (definite) drives it for convenience, but every action is also expressible as raw helm and kubectl, and definite export-helm dumps the chart for your own pipeline. Definite runs on any conformant cluster. Tell us your cloud and we will have you live on it fast.
Egress-restricted environments are a first-class deployment target, not an edge case. Mirror container images to a private registry and route Fi to an LLM endpoint inside your own VPC. If your network is locked down, Definite still runs in it.
No standing access. No copy of your data. No phone home.
Everything that touches your data runs inside your environment. Definite ships release artifacts, not a service that reaches into your cluster. Here is exactly what runs where.
The full platform. Not a stripped-down edition.
On-Prem is the same product as Definite Cloud, not a degraded version of it. Every capability below is built, deployed, and running in the product today. None of it is roadmap.
Connect every source you already use.
The job runner connects to any source you can reach over an API, so the data you already pull into Definite comes in the same way on-prem. It runs inside your environment, with an integrations framework, Python ingestion steps, and a generic webhook to land anything else.
On-Prem ships an early integration catalog with stubs for the sources below and others. They are examples of what the job runner connects to, not a fixed list.
If you can reach it over an API, the job runner can pull it. Postgres syncs incrementally, Python steps handle anything bespoke, and the generic webhook lands event streams, all without your data leaving your network.
The governed data layer for every agent in your company.
Fi is built in, but you are not locked into it. Definite On-Prem ships a read-only MCP server, so any MCP-compatible client connects and queries your governed data, all inside your environment: Claude, Cursor, an internal copilot, or a custom agent your team is building. Every one of them reads through the same data-access roles and audit log that govern your users.
As your team adopts more agents, Definite is the one place they all reach data safely, no new copy, no new credential, no new path out of your network.
Bring your own cloud.
Everything in the data path runs inside your Kubernetes cluster, in your cloud account or datacenter. The arrows from Definite into your cluster are one-time or customer-initiated: pull an image, run an upgrade, grant a time-boxed support session. There is no standing inbound connection.
One number a year. No metering, no surprises.
- ✓Single-tenant deployment in your cloud
- ✓One Helm chart, the definite CLI, versioned releases
- ✓The complete Definite analytics platform
- ✓Hands-on deployment support and an operations runbook
- ✓Higher support tier and SLAs
- ✓We complete your security review and vendor questionnaires
- ✓Scoping tailored to your environment and data volume
- ✓Discounted first-wave pricing
- ✓Deploy alongside Definite's team, with direct founder access
- ✓Direct input into what we build next
On-Prem buyers typically prefer a flat annual contract over metered usage. We'll scope the right plan with you on the deployment call.
Questions from security teams, answered.
Definite (the company) is SOC 2 Type II certified, with passed audits and penetration tests. Review the full posture at trust.definite.app.
Five deployment slots in the first wave.
If your team has been blocked by security, compliance, or data-residency requirements, this is the version built for you.
We are taking five deployments in this first wave so we can work hands-on with each platform team through install, security review, and first data load. You get direct founder access and a fast deployment.
Schedule a deployment call with Mike →