Skip to main content

Self-Managed and Air-Gap (Private Preview)

Status: PRIVATE PREVIEW

Available by request

Control Zero Self-Managed and air-gap deployment is available in private preview for organizations with strict data residency, air-gap, or compliance requirements. It is contact-us gated: reach out and we will get you set up.

Same product, your infrastructure​

Control Zero Self-Managed runs the full Control Zero stack inside your network boundary: gateway, policy engine, audit store, dashboard, and admin CLI. No request leaves your environment, and license validation is offline with no phone-home.

The SDK and gateway code are identical between Cloud (SaaS) and Self-Managed, so a team that starts on Cloud can move to Self-Managed later without rewriting agents.

When to choose Self-Managed​

  • Regulated industry: healthcare, finance, government, defense
  • Data residency: every byte must stay in a specific region
  • Air-gap: infrastructure has no internet access
  • Sovereign cloud: a national provider that prohibits external SaaS
  • Strict procurement: a security review that forbids third-party SaaS for AI governance

If none of these apply, Cloud (SaaS) is faster to start and free to try.

What you get​

  • The same governance surfaces as Cloud: gateway proxy, Python and Node SDKs, MCP server, browser extension, coding hooks, locale-aware DLP, dashboard, and compliance reports
  • Offline license validation, no phone-home
  • An admin CLI for install, upgrade, rollback, backup, restore, and key rotation
  • Self-managed authentication backed by your own database
  • Anti-tampering with configuration integrity monitoring

How delivery works​

  1. Talk to us. Email team@controlzero.ai with a short summary of your use case, scale, and timeline.
  2. Receive your package. You get a signed install bundle, a license, and a private secure link to the full install and operator documentation: the deployment guide, operations runbook, CLI reference, security hardening guide, and upgrade procedures.
  3. Deploy in your environment. Your named support contact walks you through the install. Most teams reach their first governed call within an hour.

Install commands, operator runbooks, and the CLI reference are delivered privately with your package rather than published here, so this page carries no deployment steps.

These run on Control Zero Cloud today and do not require a self-managed deployment: