Enterprise self-hosted
Run Pathrule Cloud in a Cloudflare account you control, for data residency, security review and procurement.
On this page
Enterprise self-hosted runs Pathrule Cloud in a Cloudflare account you control. It is the deployment model for organizations that need data residency, a security review, or a procurement path that keeps data in their own account.
Self-hosted is part of Pathrule Enterprise, alongside SSO, audit logs and dedicated support. To set up a deployment or a proof of concept, talk to sales.
How it works
Self-hosted is not a different backend. It is the Pathrule Cloud service, deployed into your own Cloudflare account on the same platform Pathrule Cloud runs on: a Worker with its D1 database, R2 storage, Vectorize search index and Queues, plus the web console and the Remote MCP endpoint on your domain.
The split is clean:
- Your side, your account: the database, storage, search index, secrets and backups behind your organization's memories, rules, skills and activity.
- Our side, the software: the Pathrule software and its releases, and our team's help with setup and upgrades. We run no copy of your data.
Developers connect their MCP-capable AI tools to the deployment's Remote MCP endpoint on your domain, with the same sign-in flow as Pathrule Remote MCP.
Sign-in and access
People sign in the way Pathrule Cloud offers: e-mail codes, passkeys, and GitHub or Google if you enable them, with a fresh sign-in for sensitive actions. Access is role-based (owner, admin, editor, viewer), and workspaces can be restricted to specific people. Single sign-on through your own identity provider is arranged under the Enterprise agreement.
Keys and secrets
Sign-in, encryption and provider keys are generated for your deployment and kept in your own Cloudflare account, in Worker secrets or the account's Secrets Store.
AI
Knowledge indexing and semantic retrieval run on Workers AI inside your own account. Features that use another model provider, such as naming knowledge topics, use a provider key you add; leave the key out and those features stay off.
Upgrades and recovery
New releases are deployed to your account when you choose. Database migrations are applied in order, and D1 Time Travel lets you restore the database to an earlier point. Logs and metrics stay in your Cloudflare account.
Security and compliance
Self-hosted carries the controls Pathrule Cloud has: a version history for every content change, server-side access checks on every request, role-based access, and data residency because product data stays in your account. See Security for what Pathrule stores and sends.
Open source instead
If you want a free, fully local single-developer setup rather than a hosted team deployment, see the Open source core.