# Run ByteAsk inside your own network

On-prem, air-gapped and bring-your-own-key deployments, with SAML SSO, SCIM, audit logs and model allowlists.

[Book a demo](https://byteask.cal.com/pratyush/book-a-demo) [Talk to us](https://byteask.ai/enterprise#talk)

# Managed: models through ByteAsk

$ byteask login

# Your keys: straight to the provider

$ byteask byok set

# Your server: vLLM, Ollama, llama.cpp, LM Studio

$ byteask models add my-model --url http://your-host:8000

$

## How a request travels

Each path shows what stays inside your network and what leaves it.

1. ### Managed OpenAI, Anthropic and Google models through ByteAsk. No API key to paste. Your network Developer machine byteask CLI byteask login ByteAsk managed models provider API Model provider OpenAI, Anthropic, Google
2. ### Your keys Traffic goes straight to the provider, not through ByteAsk. Your network Developer machine byteask CLI byteask byok set Model provider OpenAI, Anthropic, Gemini
3. ### On-prem Including networks with no route to the internet. Your network Developer machine byteask CLI in your network ByteAsk gateway company API keys models add Your models vLLM, Ollama, llama.cpp

## What your admins get

- **On-prem and air-gapped:** Run ByteAsk inside your network, including networks with no route to the internet.
- **Your keys, your gateway:** Company API keys through a ByteAsk gateway in your network, with model and provider allowlists.
- **SSO, SCIM and roles:** SAML single sign-on, SCIM provisioning and role-based access control.
- **Audit logs:** Every session and tool call on record, with spend limits per user and per organization.
- **Retention you set:** Custom data retention controls and IP allowlisting.
- **DPA, SLA and purchase orders:** Data processing agreement, uptime SLA, invoicing and purchase orders.

## What happens to your code

[Trust Center and security questionnaire](https://trust.byteask.ai)

- **Zero data retention:** Your prompts and code are processed to answer the request, then dropped. Nothing is kept. [Read the privacy policy](https://byteask.ai/privacy)
- **Not used to train models:** Your repositories are not used to train any model. Ours or anyone's.
- **Passwordless sign-in:** A signed magic link logs you in. No password to manage, and nothing to paste or leak.

## Questions buyers ask

Can we run it inside our own network?

Yes, on the Enterprise plan: on-prem deployment including air-gapped networks, company API keys through a ByteAsk gateway in your network, SSO, SCIM, audit logs and IP allowlisting.

Do I have to use your models?

No. Sign in and use OpenAI, Anthropic and Google models through ByteAsk with no API key to paste, or bring your own key, in which case traffic goes straight to the provider. You can also point ByteAsk at your own OpenAI-compatible server, including vLLM, Ollama, llama.cpp, LM Studio, TGI, SGLang or a LiteLLM proxy.

Which editors does it work in?

VS Code, Cursor, JetBrains IDEs, Neovim, Emacs and Zed, plus Windsurf and VSCodium through Open VSX. Every connector needs the byteask CLI on your PATH, since the editor plugin drives the same CLI.

## Tell us about your team

Or [book a demo](https://byteask.cal.com/pratyush/book-a-demo).

---
HTML version: https://byteask.ai/enterprise