Your cloud relationship
Keep cloud resources and consumption under your account, subscription, or Google Cloud organization, folders, and projects.


Managed BYOC • Bring your own cloud.
Keep your AWS GovCloud account, Azure Government subscription, or qualified Google Cloud organization and projects. Liminaid operates the agreed platform through restricted, delegated access, supporting Build developers and Control teams that retain enterprise authority.
Keep cloud resources and consumption under your account, subscription, or Google Cloud organization, folders, and projects.
Offer the same approved catalog and deployment patterns across participating teams.
Delegate defined platform tasks to Liminaid while retaining enterprise policies and final administrative authority.
The Liminaid control plane is designed to run inside the qualified customer-owned environment. Reviewed templates, scoped policies, and embedded Assurance support the agreed workload boundary. Provider, service, region, support, and AI-processing eligibility are reviewed together.
Separate locally running automation from human support access. Use narrowly scoped, temporary access for authorized operations, with privileged activity logged and managed under the agreed access policy.
Platform updates and maintenance follow an agreed change process rather than an unrestricted vendor change channel.
Your cloud account, subscription, or Google Cloud resource hierarchy; applications and data; cloud billing; enterprise identity policies; encryption controls; and final administrative authority.
Licensed platform software, the curated catalog, reviewed deployment patterns, monitoring, evidence, and agreed managed operations.
Authoritative data classifications, permitted users and activities, necessary authorizations, and customer application requirements.
Cloud ownership does not make every resource part of Liminaid’s managed scope. The operating agreement identifies managed resources, controls, evidence, and responsibilities. Independently operated resources can receive separately scoped standalone Assurance coverage.
Customer-accessible configurations, documentation, backups, and evidence support continued ownership. Revoking optional Liminaid human access should not delete resources or deliberately stop locally running workloads.
Build supports developers using qualified services and deployment templates. Control supports mature teams integrating approved API, infrastructure-as-code, identity, and release workflows. Specific integrations are qualified during architecture review.
Embedded Assurance is designed to investigate access and configuration changes, identify gaps, and verify corrections within your managed PaaS scope. Separately authorized existing resources can be assessed without transferring their operations to Liminaid.
Explore standalone Assurance →Connector permissions, evidence custody, approved AI processing, and consequential-change approvals are agreed for each covered environment. The assessment scope is not the same as the cloud ownership boundary.
Discuss assessment of independently operated resources →Yes. The customer retains final administrative authority. The agreed operating model must identify which controls Liminaid manages and how customer changes affect monitoring and assurance.
Liminaid performs agreed day-to-day platform operations in Managed BYOC. In Private Edition, your personnel perform those operations.
The core platform approach remains the same. Specific services and configurations are selected for the customer's provider, workload, and approved boundary.
Discuss the account ownership, operational support, and workload requirements your enterprise needs to preserve.
© 2026 Liminaid. All rights reserved.