at a cloud, receiving one or more notebook profiles from an on-premises system corresponding to a first cloud customer, the on-premises system comprising one or more machine learning (ML) models, the notebook profiles comprising permission sets that specify a level of access to the on-premises ML models, the notebook profiles corresponding to an on-premises ML notebook, wherein the ML notebook comprises an ML software environment for building ML models;

at the cloud, transforming the received notebook profiles into a cloud policy set for sharing the models; and

at the cloud, transmitting and receiving corresponding data from the first cloud customer to a second cloud customer, the transmitted and received data based on the cloud policy set and allows the second cloud customer access to the one or more ML models while the ML models are on-premises at the first cloud customer in accordance with the permission sets, the permissions sets providing access control for the second cloud customer for the one or more ML models.