>> How Tacitus Ships

Tacitus is designed to meet organizations where they already work: in email, secure clouds, and on‑premise data centers. Below are representative deployment modes; in practice, we tailor each installation to the security posture and regulatory environment of the client.

1. Email‑Native Cloud

Google Workspace / Microsoft 365 integration with OAuth‑scoped access. Data is processed in a dedicated tenant; nothing is used for model training.

  • > Fastest time to value
  • > Ideal for pilot and mid‑size orgs
  • > SOC‑2 ready infrastructure

2. Private VPC / GovCloud

Tacitus runs inside your virtual private cloud, next to your existing data lake and identity provider. LLM calls are routed to region‑locked providers or to your own models.

  • > For regulated sectors
  • > Full auditability of prompts/events
  • > Supports local and open‑weight models

3. On‑Premise / Air‑Gapped

For the most sensitive contexts (peace processes, internal investigations), Tacitus can be deployed on metal in an air‑gapped environment with no external network calls.

  • > No telemetry leaves the site
  • > Hardware cryptography optional
  • > Human review remains in the loop