Connector Deployment¶
Privacera connectors can be deployed in a variety of environments depending on your architecture, security requirements, and operational preferences. This section outlines the supported deployment models and explains how each connector type fits into them.
Deployment Options¶
Privacera supports three deployment models:
- Self Managed: Connectors are deployed and managed by the customer in their own infrastructure (on-premises or cloud).
- Privacera Cloud: Connectors are deployed and managed within Privacera’s SaaS platform, simplifying operations and reducing overhead.
- Dataplane: Connectors are deployed within the customer's secure network (typically behind the firewall or VPC), allowing Privacera to manage the control plane while customer data stays within their environment.
| Connector Type | Self Managed | Privacera Cloud | Dataplane |
|---|---|---|---|
| Access Connectors |  Yes | Yes | Yes |
| Discovery Connectors | Yes |  No | Yes |
| Encryption Connectors | Yes | Yes | Yes |
The table above applies to PolicySync connectors that you configure with Privacera Manager or PrivaceraCloud. For connectors that run on a Runtime Plane, see Runtime Plane Deployment.
Notes:¶
- Access Connectors are the most flexible and can be deployed in all environments. They support integration with a wide range of data sources and enable centralized policy enforcement.
- Discovery Connectors require access to data storage and scanning services, which limits their support in Privacera Cloud. However, they are fully supported in both self-managed and dataplane deployments.
- Encryption Connectors are supported across all deployment types, ensuring encryption policies can be applied wherever your data resides.
Runtime Plane Deployment¶
The Omni Connector is an Access Connector that runs on a Runtime Plane and is configured from the Trust3 AI portal. It supports these deployment types:
| Connector Type | Runtime Plane: Self-Managed (SM) | Runtime Plane: Partially Managed (D2P) | Runtime Plane: Trust3 AI Cloud |
|---|---|---|---|
| Access Connectors (Omni Connector) | Yes | Yes | Not yet |
Notes:¶
- Self-Managed (SM): the entire stack, including the control plane, runs in your cloud account.
- Partially Managed (D2P): Trust3 AI runs the control plane. The Runtime Agent and the connectors run in your cloud account.
- On either Runtime Plane, an Omni Connector runs in Shared mode (one pod serves multiple connectors) or Dedicated mode (its own application). See Deployment mode.
- Supported platforms: Databricks Unity Catalog, Databricks SQL, Snowflake, Amazon Redshift and AWS Lake Formation. See Supported platforms.
- See the Runtime Plane Support Matrix for supported clouds.
- Prev topic: Overview
- Next topic: Policy Configuration