Deployment
How Credible runs — fully managed in the cloud, or on a dedicated cluster
Credible is a fully managed service: there is nothing to deploy, patch, or scale. You connect your data where it already lives, publish a model, and the engine runs everything underneath — the gateway, the control plane, the workers that serve queries, the retrieval service, and the storage it keeps for itself. See Architecture for how those pieces fit.
Cloud
The Cloud plan runs on Credible's multi-tenant clusters. Each organization is addressed by its own hostnames — <org>.app, <org>.admin, <org>.data, <org>.mcp, and <org>.retrieval under credibledata.com — and every request carries an identity or API key whose organization must match. Services run across availability zones on multi-zone Kubernetes with rolling, disruption-budgeted deploys, so node failures and upgrades don't take the service offline; new model versions load onto workers before they serve traffic, so promotion and rollback are zero-downtime.
Because Credible is one engine rather than an instance per customer, it prices like cloud infrastructure: users, publishing, and MCP access are free, and you pay for tokens, compute time, and storage. See pricing for the meters and rates.
Enterprise: Dedicated Clusters
For strict residency or isolation requirements, the Enterprise plan runs Credible on dedicated single-tenant clusters — fully isolated deployments, selected transparently by endpoint — with:
- Multi-region deployment, on GCP or AWS. The CLI targets a cluster with
cred login <org> -c gcp|aws. - VPC connectivity and Private Link to the databases and warehouses Credible reads from, so queries never traverse the public internet.
- A 99.99% SLA with 24/7 pager support. A SOC 2 Type I audit is in progress, with Type II to follow; see Security.
- Forward Deployed Engineers — hands-on help from modeling to production.
Connecting Your Data
However Credible is deployed, database credentials are stored once, in an environment, and never leave the control plane. Outbound queries originate from stable egress IPs, so you can allowlist Credible without opening your database to the world. See Connect Your Data for the supported sources.