Workforce Hub

Deploy digital employees anywhere - cloud, private cloud, or on-prem

Workforce Hub supports regulated deployments with full control: model-agnostic, hybrid-ready, and designed for enterprise governance and auditability.

Talk to Sales Request Architecture Review
Download Security Brief →
AWS • Azure • GCP • Private Cloud • On-Prem • Hybrid • Model-agnostic • Audit-ready

Choose your deployment model

Public Cloud

AWS / Azure / GCP

Fastest rollout, native integration options, centralized governance

  • Deploy in minutes
  • Automatic scaling
  • Managed updates

Private Cloud

Dedicated environments

Controlled networking, enterprise security posture

  • Dedicated VPC/VNet
  • Data stays in your tenant
  • Private networking

On-Prem

Data residency and strict compliance

Private networking, integrations behind firewall

  • Deploy in your datacenter
  • No external data transfer
  • Full infrastructure control

Hybrid

Different deployments per tenant/use-case

Multi-region options, balanced cost and control

  • Mix cloud and on-prem
  • Multi-region deployment
  • Phased migration

Choose a deployment model per business unit or tenant.

Reference architecture

Infrastructure

  • Kubernetes-ready deployment
  • Horizontal scaling with load balancing
  • Service mesh compatible (Istio)
  • Container orchestration

Security & Compliance

  • Private networking boundaries
  • Logging and audit export
  • RBAC and policy enforcement
  • Secrets management integration
Request Architecture Review
Enterprise Edition

Run open-source models with your own LLM server

Workforce Hub supports regulated deployments where models must run in controlled environments. Enterprise Edition includes optional open-source LLM serving patterns so teams can run approved models on-prem or in private cloud - while still using the same agent builder, workflows, governance, and channels.

Benefits

  • Deploy open models behind your firewall
  • Keep model choice independent from the platform
  • Apply routing, policies, and monitoring consistently
  • Meet data residency and procurement requirements

What's included

  • vLLM-based deployment blueprints
  • Container images and Kubernetes manifests
  • Monitoring and scaling patterns
  • Model governance and version control
Request Architecture Review

Network & security patterns

Secure networking

  • Private networking / VPN / internal routing patterns
  • Controlled tool access via Tool Gateway
  • Network segmentation and firewall rules

Identity & access

  • SSO integration
  • RBAC/ABAC across tenants
  • Multi-factor authentication

Auditability & compliance

  • Audit logs
  • Approvals and human-in-the-loop
  • Traceability across actions and workflows
Governance & Operations →

Recommended deployment reference patterns

Regulated on-prem deployment

  • On-prem runtime
  • On-prem RAG + Tool Gateway
  • Governance with Control Tower

Best for: Strict data residency and air-gapped environments

Hybrid enterprise group deployment

  • Tenant A in cloud
  • Tenant B on-prem
  • Centralized governance

Best for: Multi-business unit organizations with varied compliance needs

Private cloud with contact center integration

  • Secure channel integration
  • Backoffice + human handoff
  • Audit logs and monitoring

Best for: High-volume operations with compliance and human escalation

Platform Architecture →

Deployment flexibility across the full platform stack

Deploy anywhere while maintaining consistent agent building, workflows, data integrations, channels, and governance.

Build AI Agents
Automate with Workflows
Connect Data & Integrations
Publish to Channels
Govern & Operate AI
Platform Architecture

Infrastructure compatibility

Azure

AWS

Google Cloud

Kubernetes

Istio

vLLM

PostgreSQL

OpenSearch

SSO / SAML

Active Directory

Enterprise control built in

Data boundaries

  • Data residency controls
  • Encryption at rest and in transit
  • Network isolation

Access control

  • Role-based access control (RBAC)
  • SSO / SAML integration
  • Multi-factor authentication

Audit & approvals

  • Complete audit trail
  • Approval workflows
  • Policy enforcement
Download Security Brief Request Architecture Review
ISO 9001 ISO 27001 ISO 27701

Get started with a deployment pilot

Most enterprise deployments start with a 4–6 week pilot to validate architecture, integrations, and governance controls before scaling to production.

Talk to Sales

Ready to deploy digital employees in your environment?

Request Architecture Review Talk to Sales
Security Brief • Governance & Ops • Integrations