Pinecone has announced the general availability of Bring Your Own Cloud (BYOC) on AWS, Google Cloud, and Azure, according to a company blog post published September 23, 2026.
Under the BYOC model, the data plane—where vectors, documents, metadata, and request payloads are stored and processed—runs inside the customer's own cloud account and region. Pinecone retains responsibility for the control plane, which handles resource lifecycle, authentication, and service health, and does not store or process customer content. The company states that the only data shared with Pinecone are anonymized operational metrics and traces for monitoring and support.
A key architectural feature Pinecone highlights is its "zero-access" management model: the service does not require SSH, VPN, inbound network access, or a standing cross-account IAM role. Upgrades, scaling, and maintenance are executed via an outbound pull from the Pinecone control plane, meaning no persistent access path into the customer environment is needed. BYOC is available alongside SSO, RBAC, SCIM + SAML, audit logging, encryption, and private-networking controls that Pinecone associates with its Enterprise plan.
Pinecone states that the APIs, SDKs, and control-plane workflows are identical to those of its standard managed service, allowing teams to choose a deployment model per workload without maintaining a separate development path.
In the same post, Pinecone profiles Toyota Motor North America (TMNA) as one of its first BYOC customers. TMNA head of Agentic AI & Product Research R.