The three modes at a glance

Same pipeline discipline, three places to run it — and three people who can run it.

Two meanings of zero-egress — never blurred

Both are real; they are not the same thing:

  • On-prem (Mode 1): zero-egress = nothing leaves the premises — no internet, no model, no telemetry. Air-gapped capable.
  • DocMark cloud (Mode 3): zero-egress = no PII reaches the execution plane — your identity stays in the control plane; the render worker never sees it.
  • Client cloud (Mode 2) is deliberately not called zero-egress: content reaches the LLM provider you bring, inside your own cloud boundary, under your own contract.

Side by side

CriterionMode 1 — On-premMode 2 — Client cloudMode 3 — DocMark cloud
Where it runsYour own hardware / networkYour own cloud tenantDocMark's managed Azure
Who runs & manages itYouYouDocMark
AI / LLMNone — fully offlineYour own LLM subscription (BYO; we recommend options)DocMark-managed, included
Who authors contentYour peopleAI via your LLM, or your peopleAI or your people; your copilot via MCP
What "zero-egress" meansNothing leaves your premises — no internetNot called zero-egress; content stays in your tenantNo PII reaches the execution plane
Verification gate local in your tenant
Brand provenance audit
REST API (/v1) + MCPYou run it locallyYou run it in your tenantPrivate preview — web app live today
Branded decksPer engagementPer engagementLive today
Documents · spreadsheets · web · videoOn the roadmap — not available yet
Best forAir-gapped confidential contentAI authoring inside your own cloud boundaryFastest start with managed AI

Not sure? Walk the tree

Two questions usually settle it: where must the content live, and who provides the AI?

Confidential-content teams that need an air gap start with Mode 1 — On-prem. Teams that want AI but must keep content in their own cloud boundary choose Mode 2 — Client cloud and bring their own LLM. Teams that want the fastest start with managed AI choose Mode 3 — DocMark cloud.

Ready to see your brand, verified?

A pilot puts a managed DocMark box on your network — and you watch the acceptance walkthrough pass on your own machine.

Book a pilot See pricing