Self-hosted deployment
Run AITracer in infrastructure you control.
Self-hosted deployment is for teams that need data residency, isolation from multi-tenant SaaS, or alignment with regulated environments.
This page describes deployment patterns—where the product runs and what you supply—not a hosted-SaaS runbook.
When self-hosting fits
Common reasons:
- regulatory or contractual data-boundary requirements
- private cloud or on-premises policy
- air-gapped or restricted networks
- alignment with existing security and IAM standards
What you operate
You host:
- the AITracer application (build from source or your image pipeline)
- PostgreSQL (managed service or your own cluster)
- TLS termination, DNS, and secrets in your environment
You integrate identity (for example enterprise IdP) using the variables and flows documented in Environment configuration.
Optional: object storage or archival systems for exports and long-term retention, according to your policy.
Reference flow
Patterns
Private cloud
Deploy into your AWS, Azure, or GCP accounts (or another provider) using the same patterns you use for other internal web services: private subnets as needed, managed databases where appropriate, and your standard CI/CD.
On-premises
Run the application and database on infrastructure you manage; ensure supported Node (or container) versions and PostgreSQL match the project’s current requirements in the repository.
Hybrid
Some teams run the control plane in a managed region while data stays in a designated database boundary. Network paths and trust zones are defined by your organization.
Security practices
Typical controls customers apply:
- least-privilege database credentials
- encryption in transit (HTTPS) and at rest (database/storage as provided by your platform)
- secret rotation and a managed secret store
- audit logging on infrastructure and application access
Next steps
- Review Infrastructure requirements.
- Configure Environment configuration.
- Follow your organization’s runbook for migrations, rollouts, and backups.
For commercial support options, contact support@noirstack.com.