Looks good but I don't think I would try any tool unless it is open source as a developer.
Our approach is somewhat akin to say Datadog where they have an agent that you run, but the UI is hosted.
The approach we took was to give customers a) ability to keep data in their VPC, b) security teams can audit anything running in their network, c) anything non-sensitive doesn't need to be hosted by the customer to make it simpler to run/manage.
Would be curious what you think of this hybrid approach and if there are further design decisions we could make that could be useful for us to incorporate?