On-Premise
Full control inside your own data centre — ideal for regulated banking and government workloads.
- Data never leaves your infrastructure
- Local key custody
- Suits air-gapped and sovereign requirements
Flexible deployment
Deploy the way your business works.
A regulated bank and a fast-moving SaaS company have very different constraints. Both products run in whichever model fits yours — with the same capabilities in each.
Private Cloud
Dedicated, isolated deployment in your preferred cloud with enterprise-grade security.
- Your cloud tenant and your account
- Isolated from other customers
- Scales without hardware procurement
As a Service
Fast, subscription-based rollout with zero infrastructure to manage.
- Quickest route to production
- No servers for your team to run
- Predictable subscription pricing
Side by side
Choosing between them.
| On-Premise | Private Cloud | As a Service | |
|---|---|---|---|
| Infrastructure owner | You | You (your tenant) | iSquare TechLabs |
| Data location | Your data centre | Your cloud region | Managed service |
| Time to production | Longest | Moderate | Fastest |
| Operations effort | Your team | Shared | Ours |
| Air-gapped capable | Yes | No | No |
| Typical fit | Banking, government, defence | Large enterprise, multi-region | Mid-market, fast rollout |
Capabilities are the same in every model — the difference is who runs the infrastructure and where the data sits.
Commercials
Pay per user, application or transaction.
Licensing follows how you actually use the products rather than forcing a single model on every customer. The Unified Identity Platform is modular — take IAM, MFA or PAM individually or the whole platform. Data Loss Prevention is licensed and deployed separately, and the two can run alongside each other.
Yes. Customers commonly start as a service to prove value quickly, then move to private cloud or on-premise as the deployment widens and internal requirements firm up.
The endpoint agent enforces policy locally, so protection continues when a device is offline. Findings and policy changes synchronise when the device reconnects, and mode changes propagate by heartbeat within seconds.
Six of the nine MFA modes are offline and require no mobile internet at all — CR-OTP, TOTP, POTP, GRID and FIDO2 token passkeys among them. See the full mode table.
Yes. Running both gives you one vendor, one support desk and shared compliance evidence across identity and data — which is the main reason customers adopt the second product.
Tell us your constraints and we will tell you the model.
Regulator, data residency, existing cloud commitments and the size of your team usually decide it within one conversation.