On-premises deployment
Agents that run where your ERP runs.
Most AI tools need your POs, invoices, and customer records on their servers. Trelium installs in your data center or private cloud instead, so agents work inside the network your security team already protects.
ERP
Mail server
File shares
Identity
TreliumTrusted by teams that move fast
The same platform, on your hardware.
On-prem is not a lite edition. You get the same four parts that run Trelium Cloud, and your team runs the machines.
- 1Connectors
- Talk to your ERP, databases, mail server, and file shares over the internal network. None of them gets exposed to the internet.
- 2Agent runtime
- Does the actual work, from reading a PO attachment to posting the sales order, on servers you operate.
- 3Data and audit store
- Run history, source documents, and audit logs are written to your storage and kept as long as your retention policy says.
- 4Admin and identity
- People sign in through your identity provider. Roles and approvals work the same way they do in Trelium Cloud.
Your systems
- ERP
- Mail server
- File shares
- Identity provider
TreliumSelf-hosted on your servers- 1Connectors
- 2Agent runtime
- 3Data and audit store
- 4Admin console
Three places to run it.
It usually comes down to one question: can this data leave your network? If not, self-host. If it can, Trelium Cloud means there is nothing to install.
Self-hosted
Your data center
Hardware you own
- Best for
- ERPs and file shares that live on your own hardware
- Data location
- Inside your network
- Operated by
- Your IT team, with our engineers
- Upgrades
- Scheduled with your change windows
- Platform
- Full platform, next to your ERP and file shares
Self-hosted
Your private cloud
Your cloud account
- Best for
- Teams that already run their workloads in a cloud account
- Data location
- Inside your network
- Operated by
- Your IT team, with our engineers
- Upgrades
- Scheduled with your change windows
- Platform
- Full platform, under your cloud security policies and logging
Managed
Trelium Cloud
Operated by Trelium
- Best for
- Data that is allowed to sit in a US or EU region
- Data location
- US or EU region
- Operated by
- Trelium
- Upgrades
- Rolled out automatically
- Platform
- Full platform. Move on-prem later without rebuilding agents
What your IT team will need.
This is the checklist our engineers go through with you during scoping, before anything gets installed.
- Infrastructure
- Servers in your data center or private cloud. How many depends on how many agents you plan to run, so we size it together.
- Storage
- Persistent storage for run history, source documents, and audit logs.
- Network access
- Internal routes from Trelium to each system an agent works in: your ERP, mail server, file shares, and anything else in scope.
- Model access
- A model endpoint your security team has approved. If you don't have one yet, we'll go through the options against your data policies.
- Identity
- A SAML identity provider, such as Okta, Google Workspace, or Microsoft Entra.
- Your team
- Someone from IT to own the install and upgrades, and one person who owns each workflow you automate.
What your security team will ask about.
Your existing policies still govern the servers. On top of that, Trelium controls who can do what, and logs everything agents do. Read the security overview.
Approvals
Human approvals
Make agents wait for a person before they post an entry, release an order, or email anyone outside the company.
Identity
SSO and role-based access
Sign in through your identity provider and decide who can build agents, run them, and approve their work.
Audit
Full audit trails
Every input, decision, and action is logged, so an auditor can trace any run back to the document that started it.
Data location
Data stays in your perimeter
Documents, records, and agent activity are stored on infrastructure you control.
Model training
Never used to train AI
Nothing processed through Trelium is used to train, fine-tune, or improve any model.
For procurement and legal
- SOC 2 Type II
- Audit in progress
- Vendor risk packet
- Ready to share on request
- DPA and MSA
- Available for legal review
- Trust Center
- trust.trelium.com ↗
Where teams usually start.
Good first agents handle sensitive documents and write to systems that sit on the internal network.
ERP order and PO entry
Customer POs arrive by email. The agent keys them into your ERP and sends anything that doesn't match to a person.
See the agentInvoice matching and AP
Supplier invoices arrive by email. The agent matches each one to its sales order, creates the bill, and flags anything that doesn't line up.
See the agentFreight and logistics paperwork
Check freight bills and bills of lading against what was ordered and shipped, and flag the charges that don't line up.
See the agentOrder status replies
Customers email asking where their order is. The agent checks your ERP and shipping records and drafts the reply for your team.
See the agent
On-prem, by workflow.
A closer look at the workflows teams most often bring on-prem: the agents, the controls, and the questions that come up for each.
Bring the network diagram to the call.
Thirty minutes with our engineers. We'll go through where Trelium sits in your network, what it connects to, and how model access works. Bring your IT and security leads.
Questions from IT and security.
Yes. The full platform installs in your data center or private cloud. Documents, records, and agent activity stay inside your network.
Agents only call model endpoints your team has approved. Which endpoint that is depends on your data and security policies, and we work it out with you during the architecture review.
Yes. That is the main reason teams self-host. Trelium sits on the same network as your ERP, databases, mail server, and file shares, so none of them has to be opened to the internet.
Servers in your data center or private cloud, persistent storage, internal routes to the systems your agents use, an approved model endpoint, and a SAML identity provider. The full checklist is above, and we size it with you during scoping.
Our engineers do the install, upgrades, and support together with your IT team. Nothing is pushed automatically. Upgrades go on your change calendar.
Yes. SSO, role-based access, human approvals, and audit trails work the same way they do in Trelium Cloud. See the security overview.
No. Nothing processed through Trelium, including orders, customer records, and emails, is used to train, fine-tune, or improve any AI model, by Trelium or any third party.
Choose on-prem if the data your agents touch can't leave your network, or your ERP isn't reachable from the internet. Choose Trelium Cloud if US or EU data residency is enough and you'd rather not run servers. Both include the full enterprise suite. See Trelium for Enterprise.