Start with the data boundary
Map which documents, prompts, outputs, embeddings, logs, and backups can leave the company. A private interface connected to uncontrolled model or logging infrastructure is not a private system.
Choose the operating burden consciously
A controlled VPS can be a strong fit for a focused knowledge system. Managed cloud services reduce operational overhead. Company hosted infrastructure offers the tightest physical boundary but transfers patching, monitoring, capacity, and incident response to your team.
Control matters more than location
Encryption, identity, retention, model access, observability, and exit strategy determine whether the architecture remains defensible. Geography alone does not create governance.