On-premise vs cloud AI: the four postures, honestly compared.

If your business handles material you are obliged to protect, the useful question about AI is not "which model is best". It is "which deployment posture do our obligations permit". This page defines the four postures on the market, compares them honestly, and explains where each one makes sense. It is written to be useful even if you end up choosing a different column to ours.

The four deployment postures

1. Public cloud AI. Consumer tools such as free ChatGPT accounts. Prompts are processed on the provider's servers, and on consumer tiers they can be used to train future models. Fast, capable and free, which is exactly why staff use them quietly. For client work in a regulated practice, this posture is generally indefensible.

2. Enterprise cloud AI. Paid business tiers: ChatGPT Enterprise, Claude for enterprise use, Microsoft Copilot. These are serious products. The reputable providers do not train on your business data by default, hold strong security certifications, and offer admin controls. What does not change is the architecture: every prompt and every document still travels to the provider's infrastructure, and for the major providers that infrastructure and the company behind it sit under foreign jurisdiction.

3. Private cloud and sovereign hosting. Dedicated capacity in an Australian data centre, run by you or a local provider. Data stays onshore, which resolves the offshore transmission question. You still depend on a shared facility, network transit, and a hosting relationship, and you now own a genuine infrastructure project: provisioning, scaling, patching and paying for GPUs whether they are busy or idle.

4. No-egress on-premise. The AI runs on hardware inside your building with no path to the internet. Nothing is transmitted because there is nothing to transmit on. Historically this meant building it yourself; the point of a managed unit like Dominion is getting this posture without the project.

The honest comparison

Public cloudEnterprise cloudPrivate cloud / sovereign hostingNo-egress on-premise
Model capabilityFrontierFrontierYour choice of open modelsStrong open models, tuned to your business over time
Where your data goesProvider servers, may train modelsProvider servers, not used for training by defaultAustralian data centreNever leaves your building
JurisdictionForeignForeign for the major providersAustralianYour premises, Australian law
Cost modelFree or low per userPer seat, per monthInfrastructure + engineeringPer unit, per month
AuditabilityProvider policy documentsProvider policy documents and certificationsContract + facility auditsPoint at the unit; your security team can inspect the boundary
Failure modesData absorbed into models; staff misusePolicy change, subpoena or breach at the provider; offshore processing findingsFacility or network incident; project overrunsHardware failure (managed under support); no external failure surface

Being fair to the cloud column

Enterprise cloud AI is the right answer for many businesses. The frontier models are more capable at open-ended general reasoning than anything you can run locally, the per-seat pricing is easy to start small with, and providers such as OpenAI, Anthropic and Microsoft invest heavily in security. If your obligations permit client material to be processed on offshore infrastructure under contract, enterprise cloud may be all you need.

The reason this page exists: for many Australian professional practices, that "if" fails. Legal professional privilege, health information rules and professional confidentiality obligations turn on where information travels and who can access it, not on whether the provider trains on it. "Not trained on" and "never transmitted" are different promises, and only one of them can be verified by standing in your own server room.

What "no egress" means, precisely

A no-egress unit has no route to the internet for your data. Your team connects over your local network; documents are indexed and queried on the unit; the model runs on the unit. Support and updates for Dominion happen through sessions you initiate and supervise, and health monitoring watches the hardware, never your files. The security claim is structural rather than contractual, which is why it is the one posture a compliance officer can verify without reading a trust portal.

Where Dominion sits

Dominion is the fourth column as a managed service: an AI unit installed in your office, running models tuned to your business by ErmosIQ, with monitoring, updates and support included. You get the posture without hiring an infrastructure team.

Dominion is priced per unit, per month on a 12-month term, sized to your practice: unlimited users, no per-user licences, no usage charges. Exact pricing is confirmed in the scoping consultation.

For the full cost picture including worked per-seat comparisons, see what on-premise AI actually costs.

Common questions

Is enterprise cloud AI safe for client data?
The reputable enterprise tiers are secure, certified products that do not train on your business data by default. The open question for a regulated business is not security practice but architecture and jurisdiction: your material is still transmitted to and processed on the provider's infrastructure, which for the major providers sits under foreign law. Whether that is acceptable depends on your specific obligations.
What does no egress actually mean?
The AI hardware has no route to the internet for your data. Documents are stored, indexed and queried entirely on a unit inside your building, and staff reach it over your local network. Nothing is transmitted to any provider, so there is no transmission to analyse for compliance purposes.
Is on-premise AI less capable than ChatGPT or Claude?
For open-ended general knowledge, frontier cloud models lead. For work grounded in your own documents, matters and precedents, a local model tuned to your business answers from material those cloud models will never see. Most day-to-day professional work is the second kind.
What about private cloud or sovereign hosting in Australia?
It resolves the offshore question and suits organisations that want cloud economics with Australian jurisdiction. You still depend on a shared facility and network transit, and running dedicated AI infrastructure is a real engineering commitment. No-egress on-premise removes both the transmission and the project.

See Dominion answering from your own documents.

A demonstration takes 30 minutes, uses no client data, and comes with no obligation.

Book a demo