Enterprise

Pathrule, on your own infrastructure.

Run the full team context layer inside your VPC. Your database, your identity, your backups, with SSO, audit logs and dedicated support. The commercial relationship and the source stay with us; your data never does.

SSO withMicrosoft Entra IDOktaGoogle Workspace
Your infrastructuredata plane
Database
App + realtime
Your SSO
Your backups
signed license
Pathrule · control plane

Licensing, entitlement and an optional AI proxy. We hold the commercial relationship and the source. We never hold your data.

Control plane stays with us. Data plane is yours.

Self-hosted is not a different backend. It is the same managed product, pointed at a customer-hosted database, delivered as signed container images you run with Docker Compose.

Your side, the data plane

  • Your database, data and backups
  • Realtime sync, live activity, overlap detection
  • Your SSO and your users
  • Nothing leaves your boundary

Our side, the control plane

  • Licensing and entitlement
  • Optional metered AI proxy
  • The closed source and updates
  • Never your data

Built for security review.

your-repoLocal
Memories
Rules
Skills
Source code never leaves
Your databasein your VPC

Data and privacy

  • Source code never leaves your disk
  • Encrypted in transit and at rest
  • No training on your content
Sign in to Pathrule
Microsoft Entra ID
Okta
Google Workspace
SAML · OIDC

Identity and access

  • SSO via SAML or OIDC
  • Role-based access and per-node overrides
  • Step-up reauth on sensitive actions
pathrule:v2.4.0signed
Image signature verified
SBOM published
Migrations applied
Sequential upgradev2.5.0

Operations and support

  • Signed images with an SBOM
  • Supported versions, sequential upgrades
  • Dedicated support and security review

AI, your way

AI features are a toggle. Use our metered proxy, billed at cost plus a margin, or point the deployment at your own model provider key so traffic goes straight to your provider.

Hosted proxyBYO key

Never a data hostage

Licensing is entitlement-based, not a live billing dependency. On expiry, writes pause but reads and existing data stay available. A grace window protects you from transient network loss. There is never a hard lockout.

Built for engineering organizations that depend on Pathrule.

Run Pathrule on your terms.