Self-Hosting
SenseCrypt is available as a self-managed deployment you run in your own infrastructure — provisioned and supported by our team.
SenseCrypt is available as a self-managed deployment alongside the hosted SaaS, so you can run the identity provider inside your own infrastructure — useful when data residency, network isolation, or compliance requirements call for it. The backend is a standard FastAPI application backed by PostgreSQL, serving the OIDC, SAML, SCIM, device, and admin surfaces — including the admin console — from a single process, with the same multi-tenant issuer model and security guarantees as the hosted service.
How to get it
Production self-hosting is delivered with our team alongside you, not as a public download-and-run guide. That's deliberate: a secure deployment depends on getting the prerequisites, the signing-key custody model, the face-token minter, backups, and the reverse-proxy/TLS topology right for your environment.
Talk to us to get started. Reach out through Support and we'll provide the deployment package, the environment prerequisites, the configuration and key-custody guidance, and hardening and day-two operations support tailored to your infrastructure.
Once your deployment is live, the operator how-tos in these docs apply the same way they do on the hosted service — for example, rotating signing keys, managing tenants, and gating access with groups.
Related
- Security — the security model your deployment provides.
- Multi-tenancy — how per-tenant issuers and hostnames work.
- Support — how to reach us about a self-managed deployment.