Solutions · CTO and CIO

Does this run in our cloud, and how fast is it?

It runs in your cloud, on your terms. A dedicated install in your AWS, GCP, or Kubernetes environment.

Runs inside your AWS, GCP or Kubernetes install.

Last reviewed

Illustrative. No customer data.

The difference

Their way, and ours.

Their wayRaidu
A managed SaaS that sees your prompts.A dedicated install in your cloud. Raidu deploys inside your own cloud account.
Latency you discover in production.You choose how deep the checking goes for each use case.
Manual provisioning for each team.SAML, OIDC, Google Workspace SSO, MFA, and SCIM provisioning.

What you get asked

And the record that answers it.

Where does it run?

Inside your own AWS, GCP, or Kubernetes install. There is no Raidu-operated SaaS. Your prompts, your outputs, and your records stay in your environment.

What does it add to latency?

You choose how deep the checking goes for each use case. A blocked call never opens a stream to the model, so there is no model latency cost for refused requests.

What does it take to install?

Tower ships as a CloudFormation template (AWS), a Terraform module (GCP), and a Helm chart (any cloud). Sign-in integrates via SAML, OIDC, Google Workspace SSO, MFA, and SCIM.

The product

See the screens.

Product windows from the films, with sample data. No customer data.

The record

The intercept, on the record.

Every Tower call is intercepted, checked, and written down inside your own cloud.

Entry 2,201 Intercept checkpoint · 11:04:31Z
Environment
Your AWS · dedicated install
Checking depth
Configured per use case
Verdict
Allowed · on record
Data stays in
Your cloud. Always.
sha256 84e4fe75c91de7c3d2f8ef4cb391be8b…
entry 2,201 of 13,847 · write-once

Common questions

Answered straight.

Is there a Raidu-operated cloud version?
No. Raidu is a dedicated install in your own AWS, GCP, or Kubernetes environment. There is no Raidu-operated SaaS.
Which cloud providers are supported?
AWS, GCP, and Kubernetes. Tower ships as a CloudFormation template, a Terraform module, and a Helm chart.
How does sign-in work?
SAML, OIDC, Google Workspace SSO, MFA, and SCIM provisioning are all supported.
How does Raidu detect personal data in prompts?
Tower detects 79 personal-data and credential types, including all major credential formats. You choose how deep the checking goes for each use case.
Can we add Tower as an endpoint for existing tools like Claude Code or Cursor?
Yes. Tower exposes an Anthropic-compatible endpoint. Existing tools point at it with a per-developer key, so their calls pass the same policies and are metered and budgeted like any other call. Extensions also exist for Codex, Cursor, and Windsurf.
What is the retention period for audit records?
10 years. Records are written to write-once storage with SHA-256 hashes and a chain anchored outside the database, so any change shows. Database triggers refuse updates and deletes.

One layer, in your cloud.