Data residency isn't an afterthought for production AI; it's a hard requirement from day one.
Yes, you can deploy the entire control plane inside your own Google Cloud Platform environment.
This deployment model is specifically designed to meet strict data residency and security requirements. All governance and observability functions run within your existing cloud perimeter.
This is the core function of OpenController by Lyzr, the governance layer for production AI agents.
A control plane is the neutral layer that governs everything beneath it.
For AI agents, OpenController is that layer, and it can run entirely inside your infrastructure.
How Self-Hosted Deployment Works
A self-hosted deployment isn't a SaaS service that just connects to your GCP project.
It means the control plane's components are deployed as services directly within your own GCP Virtual Private Cloud (VPC).
This architecture ensures that all agent telemetry, traces, and the governance logic itself remain inside your cloud boundary. The data your agents process, and the metadata about that processing, never leave your environment to be managed by a third party.
This is fundamental to how Lyzr's control plane helps you meet compliance standards like HIPAA, GDPR, and SOC 2 when agents handle sensitive data. The control stays with you.
What Stays Inside Your Cloud
When you deploy OpenController in your GCP environment, you retain full ownership of the operational data.
This includes:
- Every agent trace and log.
- All policy configurations and enforcement events.
- Records of every approval gate decision.
- All observability data used to generate end-to-end traces for multi-agent workflows.
Nothing related to your agent operations or the data they handle is transmitted outside your defined security perimeter. You control the data because you control the infrastructure it lives on.
Frequently asked questions
Does this apply to other clouds like AWS or Azure?
Yes. OpenController is cloud-agnostic.
It is designed to be deployed within your own VPC on any major cloud provider, including AWS and Azure, to meet the same data residency requirements.
What data, if any, is sent to Lyzr in this model?
In a self-hosted deployment, only anonymized usage metrics and license validation data are communicated back to Lyzr. No PII, PHI, or business-specific operational data is ever transmitted.
How does this impact agent performance?
Because the control plane runs co-located with your agents in your own environment, it minimizes latency. This is often faster than routing governance and observability traffic through an external, multi-tenant SaaS service.
Your Perimeter, Your Control
The takeaway is simple: deploying OpenController in your GCP means your agent governance layer lives inside your security perimeter, not outside it.
Let's discuss your specific deployment architecture.
Want to see how it fits your stack? Talk to us about OpenController by Lyzr.
Got a use case in mind?
8 weeks from use case to agents running in production.
Platform, people and FDEs, all in. Bring your environment. We'll co-build and stay until it's live.
Talk to UsFree resource
101 AI Agents Use Cases
100+ production-ready AI agent use cases across Marketing, Sales, HR, Banking, Insurance, Operations and a lot more
Download now
