Put Trelium's agents on your own servers.
Install Trelium in your data center or private cloud. The Order Entry Agent reads POs from your mail server and keys them into the ERP. The HR Helpdesk Agent answers questions from your HR system. None of those systems has to be reachable from outside.
ERP
Mail server
File shares
Identity
TreliumTrusted by teams that move fast
When teams decide to self-host.
It usually comes up in the security review.
- 1
The agent needs an ERP login
To post an order, the agent signs in to your ERP like a person would. Self-hosted, it signs in over your internal network.
- 2
The inbox is on your mail server
Agents that work from email need to read the inbox. If your mail server runs in your own data center, a self-hosted agent reads it there.
- 3
Security has to approve the model
Agents call the model endpoint your team approves. We go through the options with you in the architecture review.
One install for every team's agents.
Ops, finance, and HR agents share the same servers. People sign in through your identity provider, and every run is logged to storage you own.
- 1Connectors
- Talk to your ERP, databases, mail server, and file shares over the internal network. None of them gets exposed to the internet.
- 2Agent runtime
- Does the actual work, from reading a PO attachment to posting the sales order, on servers you operate.
- 3Data and audit store
- Run history, source documents, and audit logs are written to your storage and kept as long as your retention policy says.
- 4Admin and identity
- People sign in through your identity provider. Roles and approvals work the same way they do in Trelium Cloud.
Your systems
- ERP
- Mail server
- HR system
- Identity provider
TreliumSelf-hosted on your servers- 1Connectors
- 2Agent runtime
- 3Data and audit store
- 4Admin console
Agents teams start with.
Each one takes over work someone on your team does by hand today.
ERP order and PO entry
Customer POs arrive by email. The agent keys them into your ERP and sends anything that doesn't match to a person.
See the agentHR helpdesk
Employees ask about PTO or benefits in Slack or Teams. The agent answers from your HR system and policy docs, and sends anything sensitive to HR.
See the agentNew hire provisioning
A new hire is added to your HR system. The agent creates their accounts and tool access before day one.
See the agentBusiness reports
On a schedule you set, the agent pulls orders, quotes, and payments from your systems and emails you the report.
See the agent
Questions from your security review.
An agent can post an order or create a user account, so reviewers want to know who allowed it and what it did. Read the security overview.
Approvals
You pick what needs approval
Set it per agent. Posting an order to the ERP can wait for a person. Answering a PTO question doesn't have to.
Identity
SSO and role-based access
People sign in through your identity provider. Roles control who can build an agent, run it, and approve its work.
Audit
Full audit trails
Each run is logged with what the agent read, what it decided, and who approved it.
Data location
Data stays in your perimeter
POs, employee records, and run history are stored on your servers.
Model training
Never used to train AI
Nothing processed through Trelium is used to train, fine-tune, or improve any model.
For procurement and legal
- SOC 2 Type II
- Audit in progress
- Vendor risk packet
- Ready to share on request
- DPA and MSA
- Available for legal review
- Trust Center
- trust.trelium.com ↗
Three places to run it.
It usually comes down to one question: can this data leave your network? If not, self-host. If it can, Trelium Cloud means there is nothing to install.
Self-hosted
Your data center
Hardware you own
- Best for
- ERPs and file shares that live on your own hardware
- Data location
- Inside your network
- Operated by
- Your IT team, with our engineers
- Upgrades
- Scheduled with your change windows
- Platform
- Full platform, next to your ERP and file shares
Self-hosted
Your private cloud
Your cloud account
- Best for
- Teams that already run their workloads in a cloud account
- Data location
- Inside your network
- Operated by
- Your IT team, with our engineers
- Upgrades
- Scheduled with your change windows
- Platform
- Full platform, under your cloud security policies and logging
Managed
Trelium Cloud
Operated by Trelium
- Best for
- Data that is allowed to sit in a US or EU region
- Data location
- US or EU region
- Operated by
- Trelium
- Upgrades
- Rolled out automatically
- Platform
- Full platform. Move on-prem later without rebuilding agents
What your IT team will need.
This is the checklist our engineers go through with you during scoping, before anything gets installed.
- Infrastructure
- Servers in your data center or private cloud. How many depends on how many agents you plan to run, so we size it together.
- Storage
- Persistent storage for run history, source documents, and audit logs.
- Network access
- Internal routes from Trelium to each system an agent works in: your ERP, mail server, file shares, and anything else in scope.
- Model access
- A model endpoint your security team has approved. If you don't have one yet, we'll go through the options against your data policies.
- Identity
- A SAML identity provider, such as Okta, Google Workspace, or Microsoft Entra.
- Your team
- Someone from IT to own the install and upgrades, and one person who owns each workflow you automate.
Bring the network diagram to the call.
Thirty minutes with our engineers. We'll go through where Trelium sits in your network, what it connects to, and how model access works. Bring your IT and security leads.
Questions about self-hosted AI agents.
The whole platform runs on servers you operate, in your data center or private cloud. Agents connect to your ERP, mail server, and other systems over your internal network.
Yes. The agents, SSO, roles, approvals, and audit logs are the same. Your team runs the servers.
The one your team approves. Which endpoint that is depends on your data and security policies, and we work it out with you during the architecture review.
Trelium connects directly where there is an API. Where there isn't, a browser agent works through the system's web interface.
Your team, in Trelium. Our onboarding team helps you map the first workflows and get those agents live.
Our engineers do the install, upgrades, and support with your IT team. Upgrades go on your change calendar and are never pushed automatically.
No. Nothing processed through Trelium, including orders, employee records, and emails, is used to train, fine-tune, or improve any AI model, by Trelium or any third party.