ASKYOURDATABASE PRIVATE DEPLOYMENT EVALUATION Reviewed: 2026-11-04 Planning worksheet, not a configuration file or completed test report. Keep secrets and private endpoints out of copies shared outside your approved system. DECISION AND SCOPE Reporting question: Permitted users / tenants / tables / columns: Data categories allowed in model requests: Prohibited data categories: External inference allowed? Yes / No / Unresolved: Required network policy and unavailable workflows acceptable: Application release and configuration reference: Model / endpoint configuration reference: Expected concurrency, question sizes and result sizes: DEPENDENCY INVENTORY — repeat for each component Components: application/state, database, model, sign-in/email, updates, licensing, optional analysis, logs/backups. Component: Owner: Hosting / processing location: Approved destination reference (no credentials): Data sent or stored: Retention / deletion policy reference: Internet or auxiliary service requirement: Failure behavior: Evidence reference: Status: Unresolved / Verified / Not applicable (explain): STAGING ACCEPTANCE — record actual observations, do not prefill pass For every check: expected behavior, observed result, evidence reference, release/configuration, date/time, reviewer, unresolved issue and action owner. [ ] Known-answer query and follow-up reconcile to a fixed reference [ ] Other-user/tenant request is denied or scoped by real authorization [ ] Reporting account cannot write to disposable test data [ ] Database transport meets approved encryption/certificate policy [ ] Initial, follow-up, error and analysis model routes match the plan [ ] Fresh sign-in email arrives and login completes on application origin [ ] Required workflows operate under approved staging network policy [ ] Model outage is handled without an unapproved fallback path [ ] History/log/export locations and retained content match the plan [ ] Backup restore and supported upgrade/rollback are rehearsed [ ] Representative concurrent questions meet agreed response objectives Do not change production firewall rules or run production write tests to complete this worksheet. Coordinate authorized staging checks with owners. FICTIONAL EXAMPLE DECISION (NOT A TEST RESULT) Private app + external model may fit when approved aggregate invoice data can reach that provider. It does not satisfy a no-external-inference rule. A restricted reporting view does not prevent a user typing sensitive text in a question. Evaluate both data access and the complete model request path. COST AND OWNERSHIP (enter your inputs; no vendor benchmark implied) Application license / support quote: Application infrastructure and backups: External model usage OR self-hosted inference capacity: Database compute and operational effort: Release, recovery and security-review owners: SIGN-OFF Decision: Approved limited pilot / Revise design / Not approved: Unresolved requirements and who will resolve them: Pilot boundaries and rollback criteria: Approval owner and date: Next review date: Guide: https://www.askyourdatabase.com/docs/on-prem