Written to be forwarded to a tech lead, not to impress a buyer. Where PlayerDesk runs, what it touches, what happens when a dependency fails, and who can switch it off. For the data path specifically, see the data & security brief.
PlayerDesk runs in your environment — your cloud account, your VPC, or your own hardware. It is not a multi-tenant service with your players sitting in somebody else's database, and there is no Arctura-side copy of your book to be breached, subpoenaed or sold.
Containerised services deployed into your cloud account or on-premise. Your orchestration, your network policy, your secrets management.
Conversation history, the token–identity mapping, audit and reasoning logs, the knowledge index — all in storage you own and back up.
Outbound traffic goes to one EU-region model endpoint, carrying redacted request text only. Everything else stays inside the perimeter.
Arctura engineers have no permanent credentials to your environment. Access is granted by you, scoped, time-boxed and logged on your side — revocable without asking us.
Five layers, two IP zones. The bottom three are yours and sit in your infrastructure. The top two are the part you would otherwise have to build.
"What you keep, what we bring, and where the boundary between them actually is."
What actually happens between a player pressing send and an answer coming back — including the point at which a human takes over.
"Every routine chat handled by a human is cost you don't need. Every VIP handled by a bot is revenue you just risked. This is how one message gets resolved automatically — and how a VIP gets pulled out before that happens."
Trigger: Player writes to chat — "I can't withdraw my money, what's wrong?" (any language, any platform).
Production-tested systems rather than research papers. Your data stays yours. Your stack stays in place. Bring your tech lead to the first call — the objections are more useful than the questions.