> For the complete documentation index, see [llms.txt](/llms.txt)

# Deployment & single-tenant

Glotto runs as a managed **SaaS** by default. For enterprises with data-residency or
isolation requirements, Glotto also offers a **single-tenant cell**: a dedicated instance
in a customer-specified region/VNet, running the **same control-plane code** as the SaaS —
behind the same proprietary cloud (there is no free self-host distribution).

## How a cell is provisioned

A cell is described by a `CellSpec` (region, VPC, cell name) and stamped out by a
parameterized **Terraform module** (`templates/single-tenant-cell/`) driven through a
`CellProvisioner` abstraction (`@glotto/core-provision`). The concrete IaC backend
(Terraform/AWS) stays behind the interface — it's hermetically fake-tested in CI, while a
live `terraform apply` is a documented, human-run step (never a CI dependency).

The result: ingest a customer spec into the dedicated cell and deliver SDKs, just like the
shared tier — with the cell isolated to the customer's account/region.