Behind the scenes, Cognee Cloud runs on managed Kubernetes (AWS EKS), where each tenant gets its own isolated deployment backed by a dedicated managed PostgreSQL database.
System Overview
Cognee Cloud’s architecture centers around two main layers that work together to provide a managed knowledge processing platform:Managed Compute (Kubernetes)
Cognee Cloud runs as a managed service on AWS EKS:- API Services: Each tenant runs its own Cognee application, which serves the REST endpoints and handles authentication (see Cloud SDK)
- Per-tenant isolation: Every tenant is provisioned as its own dedicated deployment, so tenants don’t share application compute
Storage Services (Managed by Cognee Cloud)
All data persistence is handled through Cognee Cloud’s managed storage infrastructure:- Dedicated tenant database – Each tenant has its own managed PostgreSQL database holding all of that tenant’s durable state: relational data, the vector embeddings generated during the cognify process, and the knowledge graph
- Platform database – A separate PostgreSQL database, isolated from all tenant data, stores users, quotas, and billing records
Key Architectural Principles
- Tenant & Dataset Isolation: Each tenant runs as its own deployment with a dedicated database, and processing happens at the dataset level with separate storage namespaces (see permissions & access control for details)
- Managed Infrastructure: Users don’t configure compute, storage, or database credentials—everything is managed by Cognee Cloud
- Compatibility: Storage schemas remain compatible with self-hosted Cognee for easy migration
Continue exploring
Permissions & access control
See how tenant isolation and RBAC layer onto the storage services.
Security & data protection
Tenant isolation, encryption, data durability, and GDPR.