Your competitive intelligence, inside your own walls.
PrismCI is the only platform in the category you can run fully self-hosted — single-tenant, in your own infrastructure, with enterprise-grade security on by default. For security-first and regulated teams, that isn't a nice-to-have. It's the requirement.
Self-host it, or let us host it. Your call.
Crayon and Klue are SaaS-only — your data lives on their servers, full stop. PrismCI gives you the choice, and lets you change your mind later.
Self-hosted
Run the entire platform as a Docker appliance in your own cloud or datacenter. Your competitor and deal data never leaves your perimeter.
- Single-tenant, your infrastructure
- No data leaves your network
- Your keys, your control
- Turnkey CLI upgrades
Hosted
Prefer us to run it? Choose managed hosting and get the same platform without standing up infrastructure — upgrade to self-host anytime.
- Managed & maintained by PrismCI
- Same platform, same features
- Low-friction onboarding
- Migrate to self-host later
Why the deployment model decides who holds your OAuth tokens. A CI platform needs live credentials to your CRM and call recordings. Where those credentials live is an architectural choice with real consequences — read the analysis, and the public record behind it.
Runs on one server you already know how to run.
No cluster, no data platform to stand up, no long provisioning project. PrismCI ships as a set of Docker containers on a single Linux VM — you bring the box, a domain, and an AI key, and the installer does the rest.
| Resource | Minimum | Recommended |
|---|---|---|
| CPU | 8 vCPU (x86-64) | 16 vCPU (x86-64) |
| Memory | 16 GB RAM | 32 GB RAM |
| Disk | 100 GB SSD | 5–20 TB |
| Operating system | Ubuntu 22.04 LTS | Ubuntu 24.04 LTS |
| Runtime | Docker Engine + Compose | Latest stable |
Everything is a container
PostgreSQL, cache, and the web proxy all ship inside the release. You install Docker — nothing else on the host.
A single cloud VM will do
Any provider works — AWS, Azure, GCP, DigitalOcean, Hetzner, or your own datacenter. Start small and scale up as you add competitors.
On-box AI is optional
Turn on on-box AI and give the server a little more headroom; leave it off and the minimum tier runs a small team comfortably.
Prefer not to run any of it yourself? Managed hosting gives you the same platform with none of the setup — compare deployment options.
Enterprise-grade, out of the box.
Not an add-on tier — the security controls a regulated buyer expects, on from day one.
Encryption at rest
Column-level AES-256 (SIV + GCM) with a managed KEK/DEK key lifecycle — generate, rotate, back up, and restore.
Fine-grained RBAC
150+ capabilities across 5 roles. Gate every action and every menu item precisely, with defense-in-depth on the backend.
Audit logging
Every admin action is recorded — who changed what, when, and from where — with configurable retention.
GDPR & data retention
Data-subject request workflows, anonymization, and per-domain retention with nightly purge.
SSO
Okta / OIDC single sign-on with JIT provisioning and domain allow-listing.
AI governance
Redaction filters, per-feature budgets, kill switches, and a full prompt audit — you control what the AI sees and spends.
Your keys. Your data. Your control.
Sensitive fields are encrypted at the column level with a two-tier key hierarchy, so even a database snapshot is opaque without the keys you hold.
If your data can't leave your perimeter, your CI tool shouldn't force it to.
See PrismCI running inside your own perimeter.
Book a walkthrough of the self-hosted deployment, the encryption model, and the RBAC and audit controls — on your terms.