Dedicated connectivity. No public internet.
Private Link is bem’s dedicated, single-tenant connectivity option. Your traffic travels from your VPC to your bem endpoint over the AWS or Azure private backbone, never the public internet. Same API, same SDKs, same observability.
Provisioning takes one business day. Existing pay-as-you-go function pricing applies on top of the Private Link add-on.
Same product. Private wire.
Your application keeps calling the same v3 API. The only thing that changes is the hostname resolves to a private endpoint inside your VPC, and the packets never see a public IP.
Single-tenant connectivity
A dedicated VPC Endpoint Service provisioned for your organization. Your traffic terminates on infrastructure that nobody else shares.
NLB across 3 AZs
Bem fronts your endpoint with a Network Load Balancer striped across three availability zones. No single-AZ failure modes.
AWS and Azure
AWS PrivateLink and the Azure Private Link equivalent. Cross-region connections supported over the private backbone.
Your VPC. Our data plane. One private hop.
Bem provisions a VPC Endpoint Service in the region of your choice. You create an Interface VPC Endpoint in your account and point a private DNS record at it. From then on, every call to the bem API stays on the cloud provider’s private backbone.
The audit-friendly default.
Most teams start on multi-tenant cloud and add Private Link when procurement or the internal security team flags public-internet egress as a blocker.
Regulated industries
Financial services, insurance, healthcare, and government workloads where public-internet traffic is a deal-breaker on security review.
Sensitive data
PHI, PII, financial statements, claims data, defense-adjacent records. Anything where the audit trail needs to show traffic never left the private cloud backbone.
Audit requirements
SOC 2, HIPAA, PCI, and internal IT controls that require documented private connectivity for any outbound integration with sensitive payloads.
$500 a month. On top of usage.
Flat add-on to your existing bem subscription. Function call pricing stays pay-as-you-go with the same volume curve as multi-tenant. No setup fee.
Includes the dedicated VPC Endpoint Service, NLB across three availability zones, cross-region routing, and customer-managed key support.
One business day.
Tell us your AWS or Azure account ID, your preferred region, and your private DNS plan. We provision the endpoint service, you create the endpoint, and the same v3 API answers on a private IP.