[edit] I'd go one step further too and say the training data should be explicitly requestable too so third parties can verify (freedom of information act styles).
we can start out with the hosted version for evaluation and then self host for production and real customers