[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"blog-\u002Fen\u002Fblog\u002Fbyok-pourquoi-cest-non-negociable":3},{"_path":4,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":8,"description":9,"author":10,"date":11,"tags":12,"body":16,"_type":331,"_id":332,"_source":333,"_file":334,"_stem":335,"_extension":336},"\u002Fen\u002Fblog\u002Fbyok-pourquoi-cest-non-negociable","blog",false,"","BYOK — why it is non-negotiable in regulated industries","Bring Your Own Key is not a comfort option. It is the only serious way to use a third-party LLM in an audited environment.","Équipe betool","2026-05-12",[13,14,15],"security","llm","byok",{"type":17,"children":18,"toc":323},"root",[19,31,51,56,63,68,113,119,124,168,174,179,191,221,226,232,237,255,260,266,271,283,293,318],{"type":20,"tag":21,"props":22,"children":23},"element","p",{},[24],{"type":20,"tag":25,"props":26,"children":27},"em",{},[28],{"type":29,"value":30},"text","Updated on October 18, 2026.",{"type":20,"tag":21,"props":32,"children":33},{},[34,36,42,44,49],{"type":29,"value":35},"AI vendors typically offer two billing models: a ",{"type":20,"tag":37,"props":38,"children":39},"strong",{},[40],{"type":29,"value":41},"shared pool",{"type":29,"value":43}," where you pay a flat fee that covers tokens, or a ",{"type":20,"tag":37,"props":45,"children":46},{},[47],{"type":29,"value":48},"BYOK",{"type":29,"value":50}," mode where you provide your own API key and pay your provider directly.",{"type":20,"tag":21,"props":52,"children":53},{},[54],{"type":29,"value":55},"In standard SaaS, the shared pool is convenient. In regulated environments, it is untenable.",{"type":20,"tag":57,"props":58,"children":60},"h2",{"id":59},"the-problem-with-the-shared-pool",[61],{"type":29,"value":62},"The problem with the shared pool",{"type":20,"tag":21,"props":64,"children":65},{},[66],{"type":29,"value":67},"When your vendor makes your OpenAI \u002F Anthropic \u002F Mistral key available to all its customers via a single master key:",{"type":20,"tag":69,"props":70,"children":71},"ol",{},[72,83,93,103],{"type":20,"tag":73,"props":74,"children":75},"li",{},[76,81],{"type":20,"tag":37,"props":77,"children":78},{},[79],{"type":29,"value":80},"You lose the accounting detail.",{"type":29,"value":82}," It becomes impossible to prove to your auditor exactly how many tokens you consumed at the provider — you receive an aggregated invoice.",{"type":20,"tag":73,"props":84,"children":85},{},[86,91],{"type":20,"tag":37,"props":87,"children":88},{},[89],{"type":29,"value":90},"You lose the contractual chain.",{"type":29,"value":92}," Your data flows through the vendor's account. The data processing agreement (DPA) with OpenAI no longer covers you directly.",{"type":20,"tag":73,"props":94,"children":95},{},[96,101],{"type":20,"tag":37,"props":97,"children":98},{},[99],{"type":29,"value":100},"You lose control of the model.",{"type":29,"value":102}," The vendor can silently switch from model A to model B for cost reasons. Your benchmarks regress and you do not know why.",{"type":20,"tag":73,"props":104,"children":105},{},[106,111],{"type":20,"tag":37,"props":107,"children":108},{},[109],{"type":29,"value":110},"You lose immediate revocation.",{"type":29,"value":112}," In the event of an incident, you cannot revoke the key without asking the vendor first.",{"type":20,"tag":57,"props":114,"children":116},{"id":115},"what-byok-guarantees",[117],{"type":29,"value":118},"What BYOK guarantees",{"type":20,"tag":21,"props":120,"children":121},{},[122],{"type":29,"value":123},"With BYOK:",{"type":20,"tag":125,"props":126,"children":127},"ul",{},[128,138,148,158],{"type":20,"tag":73,"props":129,"children":130},{},[131,136],{"type":20,"tag":37,"props":132,"children":133},{},[134],{"type":29,"value":135},"Your prompts and completions",{"type":29,"value":137}," flow directly between your provider account and betool — not through a pooled third-party account.",{"type":20,"tag":73,"props":139,"children":140},{},[141,146],{"type":20,"tag":37,"props":142,"children":143},{},[144],{"type":29,"value":145},"Your DPA",{"type":29,"value":147}," with the provider remains the sole contractual chain. No opaque sub-processing.",{"type":20,"tag":73,"props":149,"children":150},{},[151,156],{"type":20,"tag":37,"props":152,"children":153},{},[154],{"type":29,"value":155},"Your billing",{"type":29,"value":157}," is transparent: the provider invoices you, you see every line item. betool only invoices you for orchestration.",{"type":20,"tag":73,"props":159,"children":160},{},[161,166],{"type":20,"tag":37,"props":162,"children":163},{},[164],{"type":29,"value":165},"Your revocation",{"type":29,"value":167}," is instant: regenerate the key at the provider, and the model becomes inaccessible within seconds.",{"type":20,"tag":57,"props":169,"children":171},{"id":170},"the-private-model-option-self-hosted",[172],{"type":29,"value":173},"The private-model option (self-hosted)",{"type":20,"tag":21,"props":175,"children":176},{},[177],{"type":29,"value":178},"For organisations with the strictest requirements (banking, defence, healthcare), even BYOK is not enough: sending your prompts to OpenAI or Anthropic still constitutes a transfer to the United States.",{"type":20,"tag":21,"props":180,"children":181},{},[182,184,189],{"type":29,"value":183},"The solution is a ",{"type":20,"tag":37,"props":185,"children":186},{},[187],{"type":29,"value":188},"private model",{"type":29,"value":190},":",{"type":20,"tag":125,"props":192,"children":193},{},[194,211],{"type":20,"tag":73,"props":195,"children":196},{},[197,202,204,209],{"type":20,"tag":37,"props":198,"children":199},{},[200],{"type":29,"value":201},"Ollama",{"type":29,"value":203}," or ",{"type":20,"tag":37,"props":205,"children":206},{},[207],{"type":29,"value":208},"LM Studio",{"type":29,"value":210}," on your GPU, for open-weight models (Llama, Qwen, Mistral, DeepSeek…).",{"type":20,"tag":73,"props":212,"children":213},{},[214,219],{"type":20,"tag":37,"props":215,"children":216},{},[217],{"type":29,"value":218},"vLLM",{"type":29,"value":220},", or any server exposing the OpenAI API, on a GPU cluster for high-throughput production.",{"type":20,"tag":21,"props":222,"children":223},{},[224],{"type":29,"value":225},"Your prompts never leave your perimeter. Latency is under your control. Compliance is total.",{"type":20,"tag":57,"props":227,"children":229},{"id":228},"what-it-costs",[230],{"type":29,"value":231},"What it costs",{"type":20,"tag":21,"props":233,"children":234},{},[235],{"type":29,"value":236},"The myth is that self-hosting an LLM costs a fortune. In reality, for current-generation open-weight models:",{"type":20,"tag":125,"props":238,"children":239},{},[240,245,250],{"type":20,"tag":73,"props":241,"children":242},{},[243],{"type":29,"value":244},"A dual A100 80 GB GPU server can serve a model of around 70 billion parameters in production.",{"type":20,"tag":73,"props":246,"children":247},{},[248],{"type":29,"value":249},"At moderate usage (a few thousand exchanges per day), a single A6000 GPU is sufficient to serve a 32B model with sub-second latency.",{"type":20,"tag":73,"props":251,"children":252},{},[253],{"type":29,"value":254},"Monthly amortisation cost: ~$2,000 to $5,000 depending on your procurement strategy (rental vs. purchase).",{"type":20,"tag":21,"props":256,"children":257},{},[258],{"type":29,"value":259},"Compared to an equivalent OpenAI spend over 12 months, the investment pays back in a matter of months at serious volumes — and the ROI flips entirely if you have sovereignty constraints that make OpenAI unacceptable.",{"type":20,"tag":57,"props":261,"children":263},{"id":262},"our-choice",[264],{"type":29,"value":265},"Our choice",{"type":20,"tag":21,"props":267,"children":268},{},[269],{"type":29,"value":270},"betool has been BYOK-native since day one: every organisation can connect its own keys (OpenAI, Anthropic, Google) or its private models (Ollama, LM Studio, OpenAI-compatible endpoint), and resolution always favours its own accounts.",{"type":20,"tag":21,"props":272,"children":273},{},[274,276,281],{"type":29,"value":275},"To get started quickly, the platform also offers ",{"type":20,"tag":37,"props":277,"children":278},{},[279],{"type":29,"value":280},"managed models",{"type":29,"value":282},": you use them without a key, and every token is debited in credits, model by model, on your betool invoice. It is an explicit choice, never a silent switch.",{"type":20,"tag":21,"props":284,"children":285},{},[286,288,292],{"type":29,"value":287},"In regulated environments, our recommendation remains ",{"type":20,"tag":37,"props":289,"children":290},{},[291],{"type":29,"value":48},{"type":29,"value":190},{"type":20,"tag":125,"props":294,"children":295},{},[296,301,306],{"type":20,"tag":73,"props":297,"children":298},{},[299],{"type":29,"value":300},"The shared pool creates compliance debt that your auditors will ask you to justify.",{"type":20,"tag":73,"props":302,"children":303},{},[304],{"type":29,"value":305},"The asymmetry between \"small customers\" and \"large customers\" on sovereignty is not acceptable.",{"type":20,"tag":73,"props":307,"children":308},{},[309,311,316],{"type":29,"value":310},"The experience we want to build — ",{"type":20,"tag":25,"props":312,"children":313},{},[314],{"type":29,"value":315},"\"I can see exactly what I consume, where, and with whom\"",{"type":29,"value":317}," — is only complete with BYOK.",{"type":20,"tag":21,"props":319,"children":320},{},[321],{"type":29,"value":322},"It adds one step to onboarding (15 minutes to retrieve a key from your provider). It is an investment that pays off over time.",{"title":7,"searchDepth":324,"depth":324,"links":325},2,[326,327,328,329,330],{"id":59,"depth":324,"text":62},{"id":115,"depth":324,"text":118},{"id":170,"depth":324,"text":173},{"id":228,"depth":324,"text":231},{"id":262,"depth":324,"text":265},"markdown","content:en:blog:1.byok-pourquoi-cest-non-negociable.md","content","en\u002Fblog\u002F1.byok-pourquoi-cest-non-negociable.md","en\u002Fblog\u002F1.byok-pourquoi-cest-non-negociable","md"]