Public Storage Scales a Secure, Champion-Driven AI Platform Across Every Corporate Function With Open WebUI

Overviewβ
How Public Storage used a champion-driven rollout to deploy a secure, private generative AI platform with Open WebUI on GCP, reaching ~50% active adoption in 30 days and reducing a key operational workflow by more than 80%.
At a Glanceβ
- Users: 5,000β10,000 employees
- Region: United States (data residency enforced)
- Industry: Real Estate
- Deployment: GCP (containerized, private networking)
- Models: Anthropic Claude (primary), OpenAI GPT (high-volume), Llama, Gemma (open-weight)
- Time-to-deploy: 2-week pilot, full availability in 30 days
- Adoption: ~50% active usage in the first month
- Key Results: Significant time savings on operational workflows, cross-functional AI enablement, enterprise-grade governance
About Public Storageβ
Public Storage is a Fortune 500 self-storage REIT operating over 3,000 facilities across the United States. With millions of customers and thousands of employees spanning corporate offices, call centers, and field operations, the company manages one of the largest real-estate portfolios in the world. That operational footprint makes consistent, governed access to AI a meaningful competitive advantage.
The Challenge: Scaling AI Safely Across the Enterpriseβ
As generative AI tools gained momentum, Public Storage recognized both the opportunity and the risk. Teams across the organization were beginning to experiment with AI independently, creating a fragmented landscape of ad-hoc subscriptions and ungoverned usage.
Leadership set a clear objective: provide a secure, centralized AI platform that would raise AI literacy across the organization, surface high-value business use cases, and enable repeatable productivity gains, all without compromising data security or compliance.
Key Requirements
- Private deployment within the enterprise GCP environment
- Access restricted to authenticated employees behind the corporate firewall
- SSO integration with existing identity provider Okta
- Model flexibility without vendor or single-LLM lock-in
- Full audit trails, DLP policies, and PII redaction
- Role-based access control by group
SaaS-based AI tools offered convenience but lacked the privacy controls, network restrictions, and model flexibility that Public Storage required.
The Solution: Open WebUI on GCPβ
Open WebUI was selected for its extensible foundation: an open architecture that allowed Public Storage to evolve from a basic chat interface into a secure, multi-model internal AI platform. It supported rapid iteration, broad model choice, and enterprise governance while remaining fully private.
Architecture Highlights
- Compute / Orchestration: Containerized workloads on GCP, autoscaled to internal demand
- Storage / Database: Managed PostgreSQL and secure object storage (GCP-native)
- Networking: Private networking; access restricted to authenticated employees behind the corporate firewall; private endpoints for open-weight LLM APIs
- CI/CD: Automated pipelines for controlled Open WebUI upgrades
- Logging / Monitoring: Centralized logging and usage dashboards via GCP-native tooling and Langfuse for LLM observability
- Security Controls: MFA via IdP, RBAC by group, data residency enforced, PII redaction with user-facing interruption, moderation guardrails, audit exports to SIEM, DLP policies, egress restrictions