Deployment

Deploys inside your perimeter.

Self-hosted, managed on-prem, or hosted on a dedicated single-tenant environment we build just for you. Same product, three operating models.

Where FileRelay sits

Same data path, three different boundaries. Click between deployment models to see how it works.

Architecture
Self-hosted
Your infra. You run it.
Your infrastructureFileRelay dedicated infrastructure
Yours
Your network perimeter
SAP
FileRelay
You operate
Destinations

SAP, FileRelay, and your destinations all sit inside your network. Documents never traverse FileRelay-controlled infrastructure.

Self-hosted

Most control

You run it. Helm chart or Docker Compose, your cluster, your ops team. Documents never leave your network.

  • OpenShift, EKS, AKS, GKE, bare metal
  • Air-gapped deployments supported
  • Customer-managed secrets (Vault, KMS)
  • Full source access on enterprise tier
Time to deploy1–2 weeks

Managed on-prem

Your infra · we operate

We deploy and operate FileRelay inside your cloud account. You keep data residency; we handle ops.

  • Customer-owned VPC / subscription
  • 24/7 monitoring + SLA
  • Zero-touch upgrades
  • Dedicated tenant — no shared infra
Time to deploy2–5 days

FileRelay-hosted

Dedicated · we operate

We host and operate FileRelay on dedicated infrastructure built just for you. Same isolation as on-prem.

  • Dedicated single-tenant infra
  • Same product as self-hosted
  • We run deployment, ops & upgrades
  • No infra/ops team needed
Time to deploy1–3 days

Side-by-side comparison

For procurement and security teams.

Self-hostedManaged on-premFileRelay-hosted
Where documents flowYour network onlyYour cloud accountDedicated single-tenant infra we provide
TenancySingle-tenantSingle-tenantSingle-tenant (dedicated)
You operate the runtime
We operate the runtime
Whose infrastructureYoursYoursOurs · dedicated to you
Air-gapped deploymentsOn request
SLASelf-managed99.9% (24/7)99.9% (24/7)
UpdatesYou upgradeZero-touchZero-touch
Customer-managed secrets (KMS/Vault)BYOK supported
Custom connectors / source accessOn requestOn request
Pricing modelAnnual licenceAnnual + opsAnnual + hosting
Best forAir-gapped / max controlWant on-prem, hate opsNo infra/ops team in-house

FileRelay is on-prem across every model — never multi-tenant SaaS. What changes between models is who owns the perimeter and who operates the runtime, not the product itself or its isolation model.

Not sure which fits?

Tell us about your SAP setup and security policy — we'll get back within 24-48 hours with a deployment recommendation.

See security model