VIEWPORT
Self-host

On-prem roadmap

What's coming, in what order. Where the full-stack self-host story sits today.

PlannedDescribed to intent. Not yet implemented in code.

Self-hosting the relay is shipped. Self-hosting the control plane is on the roadmap. This page is what's coming, in what order.

What ships today

  • Relay: Docker image, stateless, three backplane modes. See Deploy the relay.
  • Daemon: open-source npm package. Always on your machine.

What's in beta

  • Control plane on customer infra. Laravel API + Postgres + React web app, deployed to your VPC. Manual setup; no public Helm chart yet. Pilot customers run in a documented topology.
  • Customer-managed Postgres. Bring your own Postgres + Redis. Daemons connect through your relay; the API runs on your nodes.
  • Customer-managed email. Plug in SES / Mailgun / your SMTP for invitations and notifications.

On the roadmap

  • Public Helm chart for control-plane deployment.
  • Customer-managed encryption keys (CMEK) for vault encryption. Your KMS wraps the vault root key.
  • HSM-backed daemon keys (TPM / Secure Enclave / Yubikey-backed identity).
  • Schema-per-tenant option for hard tenant isolation (today is row-level).
  • Air-gapped operation. Daemon that does not require relay connectivity (local-only mode).
  • Long-term audit retention beyond 7 years with documented integrity proofs.
  • SOC 2 Type II + ISO 27001 attestations for the hosted control plane.

Order

Roughly:

  1. Public Helm chart (Q3).
  2. CMEK for vault (Q3-Q4).
  3. HSM-backed keys (Q4).
  4. SOC 2 Type II (Q4. Already in audit window).
  5. Schema-per-tenant isolation option (Q1 next year).
  6. Air-gapped mode (Q2 next year).

Quarters are aspirational, not commitments. We'd rather ship later and be honest than promise dates we miss.

What we won't do

  • Run our infrastructure on your behalf as a managed service inside your VPC. That's a managed service, not self-host. Different conversation.
  • Provide source access to the hosted control plane today. The daemon and relay are open source. The control plane is closed and stays closed for now.

Pilot scoping

If you need on-prem before the public release:

  1. Email hello@getviewport.com. Tell us your timeline, your scale (members, agents, runs/day), and your compliance posture.
  2. We do a 30-minute scoping call.
  3. If it's a fit, we deploy together over 2-4 weeks. You operate it after. We provide runbooks.
  4. We're not charging for pilot deployments yet. Bandwidth-limited. Typically 1-2 new customers a quarter.

Where to go next

Security posture

Threat model for the self-hosted relay. What it can and cannot see. What still goes to Viewport.

Troubleshooting

When something's wrong, start here. The top failure modes with recovery steps.

On this page

What ships todayWhat's in betaOn the roadmapOrderWhat we won't doPilot scopingWhere to go next