Self-hosted, always
FlatRun runs on your servers. There is no FlatRun cloud between you and your apps, and no telemetry: the agent reports nothing about you or your projects to us.
Security & GDPR
FlatRun runs on your infrastructure and sends no telemetry. Your projects, databases and secrets stay where you put them, which keeps GDPR and data residency in your hands.
Open source, MIT licensed ยท Runs on any Linux server with Docker
FlatRun runs on your servers. There is no FlatRun cloud between you and your apps, and no telemetry: the agent reports nothing about you or your projects to us.
Projects, databases, backups and secrets stay on the servers you choose, in the country you choose. FlatRun only sends data to services you connect yourself.
Every line is on GitHub under the MIT license, so you can read exactly what runs on your server.
GDPR
We never receive your users' data, so there is no data processing agreement to sign with FlatRun.
Run FlatRun in Germany, France, the Netherlands or wherever your obligations require. Data stays in that jurisdiction.
A project is a directory. Deleting the project removes its directory and the data inside it.
Without a third party hosting the platform, there are no cross-border transfers to assess for FlatRun itself.
Outbound connections
FlatRun connects out only for things you use or switch on. Nothing on this list sends your users' data to us.
Practices
Certificates are issued and renewed automatically, and their expiry is tracked.
Secrets are encrypted at rest, can be rotated on a schedule, and are never shown again once saved.
Users and API keys have roles, and keys can be limited to specific projects.
Each project runs in its own containers with its own network.
Plan a change, see what it affects, then apply it. Stale plans are refused.
Configuration and data are files you can read, back up and keep in version control.
Please report it privately so we can fix it before it is public.