ClickHouse self-hosting for compliance

Diving deeper into

AI program manager at AstraZeneca on running self-hosted ClickHouse

Interview
Because AstraZeneca is a regulatory company, we need to follow strict compliance standards, which is why we have not used their cloud.
Analyzed 3 sources

This says ClickHouse wins inside regulated enterprises only when it can be dropped into the company’s own controlled environment, not when it asks the customer to move sensitive workloads onto a vendor managed service.

  • At AstraZeneca, ClickHouse is the fast layer for oncology, EHR, and agentic AI retrieval, but Snowflake remains the governance layer for regulatory reporting, clinical operations, and cross domain integration. That split shows compliance is not just about where data sits, but which system owns audit heavy workflows.
  • Self hosting gives AstraZeneca control over release timing, system separation, backups, and cluster design. The team explicitly keeps transactional and analytical systems separate, tests one stable release per month, and avoids fast upgrades, which fits a validation driven operating model better than a continuously evolving cloud service.
  • This is a broader product gap for ClickHouse Cloud, not a one off customer preference. Across related research, conversion from open source to cloud depends on enterprise features like RBAC, audit trails, regulatory reporting, and cloud economics that justify giving up self management.

The next leg of ClickHouse’s enterprise growth depends on making cloud feel as controllable as self hosting for regulated buyers. If it closes the gap on governance, upgrade predictability, and compliance tooling, pharma and other tightly regulated sectors become natural cloud conversions instead of permanent open source holdouts.