Self-host
On-prem roadmap
What can be self-hosted now and what is not available yet.
PlannedDescribed to intent. Not yet implemented in code.
Self-hosting the relay works today. Self-hosting the control plane is not generally available.
Available now
- Relay: Docker image, stateless, three backplane modes. See Deploy the relay.
- Daemon: open-source npm package. Always on your machine.
What's in alpha
- Control plane on customer infra. Server API and web app deployed to your infrastructure. Manual setup only; no public Helm chart yet.
- Customer-managed database. Bring your own database and cache. Daemons connect through your relay; the server API runs on your nodes.
- Customer-managed email. Plug in SES / Mailgun / your SMTP for invitations and notifications.
Not available yet
- Public Helm chart for control-plane deployment.
- Customer-managed encryption keys (CMEK) for vault encryption. Your KMS wraps the vault root key.
- HSM-backed daemon keys (TPM / Secure Enclave / Yubikey-backed identity).
- Schema-per-tenant option for hard tenant isolation (today is row-level).
- Air-gapped operation. Daemon that does not require relay connectivity (local-only mode).
- Long-term audit retention with documented integrity proofs.
- SOC 2 Type II + ISO 27001 attestations for the hosted control plane.
What we won't do
- Run our infrastructure on your behalf as a managed service inside your VPC. That's a managed service, not self-host. Different conversation.
- Provide source access to the hosted control plane today. The daemon and relay are open source. The control plane is closed and stays closed for now.
Pilot scoping
If you need full-stack on-prem before it is generally available:
- Email
hello@getviewport.com. Tell us your requirements, scale (members, agents, runs/day), and compliance posture. - We do a short scoping call.
- If it is a fit, we define the deployment path together. You operate it after. We provide runbooks.
- Pilot bandwidth is limited.