Platform deployment
The Union.ai platform uses a split-plane model with separate control and data planes.
In both BYOC and Self-managed deployments, your code, input and output data, container images and logs reside entirely on the data plane, which runs in your cloud account, while the control plane runs on Union.ai’s cloud account, providing the workflow orchestration logic.
The control plane does not have access to the code, data, images, or logs in the data plane.
If you choose a Self-managed deployment, your data isolation is further enhanced by the fact that you manage your data plane entirely on your own, without providing any access to Union.ai customer support.
If you choose a BYOC deployment, Union.ai manages the Kubernetes cluster in your data plane for you. The data isolation of the control vs. data plane is still enforced - for example, Union.ai has no access to your object storage or logs. However, Union.ai customer support will have some access to your cluster, though strictly for upgrades, provisioning, and other actions related to maintaining cluster health.