Research and source notesPrimary guidance used in this analysis
Sources and how they inform the decision
NIST AI Risk Management Framework 1.0Frames AI risk across the lifecycle through GOVERN, MAP, TRACK, and MANAGE. It emphasizes that trustworthy AI depends on context, people, use, and continuing risk management - not only the model or hosting location. https://doi.org/10.6028/NIST.AI.100-1
NIST Generative AI Profile, NIST AI 600-1Extends the AI RMF for generative AI and identifies governance, content provenance, pre-deployment testing, incident disclosure, privacy, information integrity, security, and value-chain risks. https://doi.org/10.6028/NIST.AI.600-1
NIST SP 800-207, Zero Trust ArchitectureStates that no implicit trust should be granted solely because an asset or user is local, inside a network, or company-owned. This directly supports applying identity and resource-level controls to cloud and local AI alike. https://doi.org/10.6028/NIST.SP.800-207
Microsoft Foundry - data, privacy, and securityDocuments that prompts, completions, embeddings, and training data are not used to train foundation models without permission, while also describing stateful features, data stores, abuse monitoring, deployment geography, and feature-specific processing. https://learn.microsoft.com/en-us/azure/ai-foundry/responsible-ai/openai/data-privacy
Microsoft Foundry - private endpoint networkingShows the use of virtual networks and private endpoints to create a security boundary for managed model access, including connectivity from local or on-premises clients. https://learn.microsoft.com/en-us/azure/ai-foundry/openai/how-to/network
Amazon Bedrock - data protection and AWS PrivateLinkDescribes shared responsibility, identity, encryption, logging, provider isolation, and private VPC connections that avoid public internet paths. https://docs.aws.amazon.com/bedrock/latest/userguide/data-protection.html and https://docs.aws.amazon.com/bedrock/latest/userguide/vpc-interface-endpoints.html
Google Cloud - generative AI data governanceDocuments training restrictions and explains that achieving zero data retention requires feature-specific actions, reinforcing the need to review the exact service and configuration. https://cloud.google.com/vertex-ai/generative-ai/docs/data-governance
NVIDIA NIM for Large Language ModelsIllustrates a supported local and hybrid serving model built around validated containers, model weights, inference engines, hardware and runtime prerequisites, local cache, Kubernetes, and multiple deployment environments. https://docs.nvidia.com/nim/large-language-models/latest/about-nim-llm/overview.html
Important:Provider features, model availability, licensing, retention options, regions, and service terms change. Re-check the exact current documentation and contract before approving a production architecture. This guide is technical and operational guidance, not legal advice.