> ## Documentation Index
> Fetch the complete documentation index at: https://docs.baseten.co/llms.txt
> Use this file to discover all available pages before exploring further.
# Single-tenant
> Dedicated, fully managed infrastructure with isolated compute and networking.
Single-tenant runs your inference workloads in an isolated VPC in Baseten Cloud. Baseten provisions and operates compute and networking dedicated to your organization. You get a dedicated workload plane without running infrastructure in your own cloud account.
Single-tenant is available with custom pricing on the Enterprise plan.
## Data security
Single-tenant adds dedicated, tenant-level isolation on top of Baseten Cloud's [data security](/observability/security) controls:
* **Dedicated isolation**: Compute and scheduling are restricted to your organization. Requests still authenticate against the shared control plane, but no other customer's workloads run on your infrastructure.
* **Secure weights**: Models can pull weights from a private source, and weights can be cached in-cluster to accelerate cold starts.
* **Payload retention**: Baseten doesn't store synchronous inference inputs or outputs. Async inference stores inputs until the request runs; see [Async inference](/inference/async).
* **Restricted egress**: On request, model replicas and supporting services can run without direct internet access, with outbound traffic limited to an approved allow-list.
Single-tenant supports the same compliance programs as Baseten Cloud (SOC 2 Type II, HIPAA, and GDPR) in a dedicated environment. See [Secure model inference](/observability/security) and the [Baseten Trust Center](https://trust.baseten.co/) for more information.
## Private networking
Inference requests route directly from your application to your dedicated environment and can remain off the public internet. Expose endpoints through a provider-native private networking service, such as [AWS PrivateLink](https://docs.aws.amazon.com/vpc/latest/privatelink/what-is-privatelink.html) or [Google Cloud Private Service Connect](https://docs.cloud.google.com/vpc/docs/private-service-connect), so traffic from your VPC reaches your environment over the cloud provider's private backbone.
You can also restrict inference to a specific IP range or to traffic originating within your VPC.
## Capacity
Baseten procures and operates capacity for your dedicated workload plane. Work with the Baseten team to select regions, GPU types, and capacity commitments that meet your workload requirements.
## Get started
Single-tenant is available with custom pricing on the Enterprise plan. [Talk to us](https://www.baseten.co/talk-to-us/) to discuss your isolation, connectivity, and capacity requirements.