Architecture

One engine per customer. No shared data pool.

Each deployment gets its own cloud environment, database, and document store. Your customer's data stays in their account — under their keys.

How it fits

Your app. Our engine. Their cloud.

web
Your app
hub
You Can Ask
cloud_lock
Customer cloud
Document scanningSearchAI modelsAudit logsTheir infrastructure
Principles

Why teams choose this model

One codebase for Bold to maintain. Config and seed data for you to rebrand. Your integrations via standard tool hooks.

code

One codebase, many instances

Same monorepo (Frontend, Backend, Payment.API) for every customer. Bold ships one product line; you get an isolated instance — not a fork maintained forever.

database

Configuration beats customization

Vertical vocabulary, prompts, intents, and tools live in seed + domain_config.json — not Python enums. Rebrand construction → procurement by swapping data.

extension

Extend with your systems

Platform seed covers document intelligence out of the box. Your unique value — ERP, procurement graph, CRM — plugs in via MCP or HTTP in domain_config, without modifying the monorepo.

cloud

Tier = ownership model

Sandbox for evaluation, Enterprise on Bold infra, Dedicated Stack in your GCP with BYOK. Price isolation and SLA — not just feature flags.

Three layers

Who maintains what

Platform at the bottom, your isolated instance in the middle, customer-facing brand on top.

layers

Layer 1 — YcaOS platform

Monorepo, Tool Execution Gateway, ingest pipelines, admin APIs, CI/CD. Bold maintains; customers never fork.

dns

Layer 2 — Your instance

Cloud Run + SQL + vector + secrets per deployment profile. Terraform provisions; Ansible bootstraps; GitHub Actions deploys.

palette

Layer 3 — Customer surface

Brand, domain, documents, users, billing. config.brand.json + seed package — what end users actually see.

Commercial tiers

Sandbox, Enterprise, or Dedicated Stack

From evaluation to full customer-owned GCP with premium SLA.

science

Sandbox

Time-limited evaluation on shared demo infra — preloaded vertical seed, hard caps, sales-assisted upgrade path.

  • done14–30 day trial
  • doneDemo data included
  • done→ Enterprise or Dedicated
apartment

Enterprise

Dedicated instance on Bold-managed cloud — full branding, custom domain, optional Stripe. Standard SLA (~99.5%). YCA Construction profile.

  • done€5k–25k setup · €2k–8k/mo platform
  • doneFull seed + Vercel
  • doneBold-operated stack
shield

Dedicated Stack

Your GCP project, your keys, your network boundaries. Custom MCP tools, premium SLA (99.9% target), data residency for regulated industries.

  • doneAnnual license + implementation
  • doneBYOK LLM + vector
  • doneMCP / HTTP custom tools

Switch AI providers in config

OpenAI, Azure, Anthropic, Gemini, or on-prem — without redeploying your product.

OpenAIAzure OpenAIAnthropicGeminiOllama (on-prem)
Security

Built for isolation reviews

IAM boundaries, customer-managed encryption, and private integration paths.

security

IAM guardrails

Unique service accounts per stack; GitHub Actions actAs scoped to customer project; least-privilege Secret Manager bindings.

key

Customer-managed encryption

CMEK for Cloud SQL and GCS at Dedicated Stack; Bold never holds production keys unless explicitly contracted.

swap_calls

Private data paths

MCP and ERP integrations stay in customer VPC; Backend calls out via Streamable HTTP — your graph never lands on Bold infra.

Want a walkthrough for your setup?

Book an architecture review — we map your VPC, secrets, and data flow against our reference deployment.