Vellum is designed to support three hosting environments. Right now, only one exists. Here's the full picture so you know what's available today and what's coming.
| Environment | Status | Who manages it | Where it runs |
|---|---|---|---|
| Fully local | ✅ Available now | You | Your personal machine |
| User-hosted remote | 🔜 Coming soon | You | Your cloud (AWS, GCP, a VPS, Docker) |
| Vellum-hosted remote | 🔮 Coming later | Us | Our cloud infrastructure |
This is what you're using if you installed the desktop app. Everything runs on your Mac.
Pros:
Cons:
Best for: People who want the full power of a local assistant and are comfortable managing what it can access through the permission system. The “I want my AI to do everything” crowd.
🫣 The honest take: Fully local is the most powerful option and the one that requires the most trust. Your assistant lives on the same machine as your personal files, your photos, your browser history, everything. The permission system protects you (every sensitive action requires approval), but the potential access surface is your entire computer. Be thoughtful about it.
You run the assistant on your own cloud infrastructure. Think: a Docker container on an AWS EC2 instance, or a VPS from any provider.
Pros:
Cons:
Best for: Technical users who want isolation between their assistant and their personal machine. The “I want a VPS in the cloud running my assistant 24/7” crowd.
We run it for you. One-click deploy. We handle infrastructure, updates, uptime, everything.
Pros:
Cons:
Best for: People who want the convenience of a managed service and are comfortable with cloud hosting. The “just make it work” crowd.
| Priority | Best choice |
|---|---|
| Maximum power and local access | Fully local |
| Maximum isolation from personal machine | User-hosted remote |
| Maximum convenience, minimum setup | Vellum-hosted remote |
| Always-on availability | User-hosted or Vellum-hosted remote |
| Complete data ownership | Fully local or user-hosted remote |
| No DevOps required | Fully local or Vellum-hosted remote |
There's no universally “best” option. It depends on what you value: power, isolation, convenience, or control. And you don't have to pick one forever. As more environments become available, you'll be able to migrate your workspace between them.
Regardless of where your assistant runs, the core principles don't change:
The experience adapts to the environment. The principles don't.
That's the full Trust & Security picture. We told you we'd be transparent to the point of being annoying. Hopefully it was more helpful than annoying. If you have questions we didn't answer, check the FAQ or just ask your assistant directly. It's surprisingly honest about its own limitations.