Platform / Architecture

A white-box architecture. Your data plane, your cloud, your control.

Tessell separates the management layer from the data layer. The control plane holds only metadata. The data plane, with all of your databases and data, runs in your own cloud account. You choose where each one runs.

Talk to a SpecialistDownload the architecture guide
The Tessell difference

See every layer. Your data never leaves your cloud.

You can see every layer, and your data never leaves your cloud. That is the whole design, not a configuration option.

Two planes, cleanly separated
Two planes, cleanly separatedThe control plane manages, the data plane holds your data. The line between them never blurs, and only metadata crosses it.
Your data plane, in your cloud
Your data plane, in your cloudEvery database, snapshot, backup, and log stays in your own account, inside your VPCs and security boundary.
You choose where it runs
You choose where it runs Run the data plane in your cloud, or run the entire platform, control plane included, inside your own tenant.

Backed by the standards enterprise security teams require.

SOC2
ISO
ISO
PCI DSS
The two planes

One control plane. One data plane. A clean line between them.

The control plane runs the microservices that provision, monitor, patch, and orchestrate your databases, holding only metadata. The data plane runs in your cloud account and holds everything real. Agents in the data plane make outbound-only calls to the control plane, so there are no inbound ports to open.

FeatureDetail
Deployment models

Choose where the control plane and data plane run

Tessell runs the way your governance requires, from a shared managed service to a deployment that lives entirely inside your own cloud. That flexibility, deploying on your own governance and security terms, is what we call At Your Terms.

Professional (Tessell-hosted)

A fast start for small teams and developers on a shared managed service. Runs in Tessell's cloud.

Business (Tessell-hosted)

A dedicated control plane with a custom domain and multiple networks to segregate databases. Runs in Tessell's cloud.

Virtual Private Tessell (Tessell-hosted)

A dedicated cloud account with dedicated servers and instances for large enterprises. Dedicated account in Tessell's cloud.

Virtual Private Tessell @ Customer (Your cloud, featured)

The entire platform, control plane included, deployed and fully managed by Tessell inside your own cloud, using your accounts, networks, and security policies.

Connectivity

Private by default, or public with control

You choose how the control plane and data plane communicate. Either way, no inbound ports are opened in your environment.

Private CP-DP

Private link, no public internet | Control-plane to data-plane traffic runs over AWS PrivateLink or Azure Private Link. Nothing traverses the public internet, which reduces latency and simplifies compliance for regulated workloads.

Public CP-DP

Outbound-only over the internet | Where private link is not required, outbound traffic routes through a NAT gateway with your own security-group rules. The control plane still never initiates a connection inward.
Availability and recovery

Built for continuity, from single instance to cross-region DR

Match the topology to the tier of the workload, and let the Availability Machine handle data protection to your SLA.

Single instance
Single instanceA single dedicated instance for development, test, and lower-tier workloads.
Cross-region disaster recovery
Cross-region disaster recovery A standby replica in a separate region, promotable on demand, with drill support.
The Availability Machine
The Availability MachineSLA-driven automated snapshots, log backups, and point-in-time recovery.
Data management
Data management Manual and sanitized snapshots, native backups, and controlled sharing through Data Access Policies.
Tiered to your workload
Tiered to your workloadMap each database to an availability and recovery tier, from 99.99% down.

See how this maps to your environment.

Talk to a Specialist
No lock-in

Any cloud. Any infrastructure. Any engine.

Clouds

AWS · Azure · Google Cloud · Oracle Database@Cloud

Engines

Oracle · SQL Server · PostgreSQL · MySQL · MongoDB

Your choice of infrastructure

Right-size to the workload rather than over-provisioning by default.

Infra Flexibility

Choose standard elastic storage, or patented NVMe-to-persistent-storage performance, up to 2 million IOPS for the most demanding production workloads.
Frequently Asked
Questions
The control plane provisions, monitors, patches, and orchestrates your databases and holds only metadata. The data plane runs in your own cloud account and holds everything real, your databases, replicas, snapshots, backups, and logs.
Oracle, SQL Server, PostgreSQL, MySQL, and MongoDB, across AWS, Azure, Google Cloud, and Oracle Database@Cloud, with the same architecture and operating model everywhere.
Oracle Enterprise Edition, Standard Edition 2, and Exadata, with high availability and cross-region disaster recovery available on Enterprise Edition. Tessell keeps certified software images current for each engine.
Yes. Run pre- and post-provisioning scripts, apply custom parameter profiles, and bring your own OS images. That version and OS-level control is what lets workloads run as a managed service instead of staying self-managed.
Little to none. Tessell uses a phased migration approach called Lift and Shine that moves databases without rewrites, so applications connect the same way they do today.
Migrations are designed for near-zero downtime, with cutover planned around your maintenance windows. Enterprises have moved hundreds of production databases this way.
Yes. With Virtual Private Tessell @ Customer, the whole platform, control plane included, runs inside your own tenant, with your accounts, networks, and security policies.
No to both. Agents make outbound-only calls, so there is never an inbound connection, and because your data plane already lives in your account with your choice of cloud and engine, nothing ties you in.
Want to see how it would deploy in your environment?

Talk to a specialist. We will map the right deployment model, connectivity, and topology to your cloud and your compliance requirements.

Talk to a specialist