Managed by us, or run it yourself. Same images.
No feature-gated enterprise tier that cripples the on-prem build. The SaaS and self-hosted editions ship from one source. Delivery is a choice — licensing, data residency, operational control — not a feature matrix.
Pick the delivery that fits.
Full feature parity across all three — the same container images, same portal, same agents.
Konstera Cloud
We run it. You deploy agents.
- Fully managed Postgres + Temporal
- Hosted in EU / US / UK — your choice
- Automatic upgrades, zero-downtime
- SOC 2 Type II on the roadmap
Fastest path to live agents.
Kubernetes · Helm chart
Your cluster, your data, same features.
- Deploy on AKS, EKS, GKE, or on-prem
- Managed Postgres or bring-your-own
- Standard observability hooks
- In-cluster secrets integration
For teams with platform engineering in-house.
Docker Compose bundle
One VM. One tarball. One command.
- Single-node, single-tenant mode
- Up and running in under 30 minutes
- Great for pilots or isolated environments
- Upgrade path to Helm when scale demands
The 'try it' option — same binaries as production.
Source available. Business Source License 1.1.
Inspect the code. Modify it. Deploy it anywhere. The only thing BSL 1.1 restricts is reselling Konstera as a competing hosted service — which was never the point. For every normal enterprise use, BSL is as open as MIT.
- Read, fork, patch, deploy — in production — for your business.
- Converts to Apache 2.0 four years after each release.
- No gotcha enterprise upsell for self-hosted features.
| Use in production | ✔ allowed, no permission needed |
| Modify & redistribute | ✔ allowed, same licence |
| Inspect the full source | ✔ full repository |
| Resell as competing SaaS | ✘ restricted (4-year window) |
| Convert to Apache 2.0 | ✔ automatic after 4 years |
Enterprise-grade controls, from the first line.
Tenant isolation
PostgreSQL row-level security on every tenant-scoped table. Application role has NOBYPASSRLS. Verified in migration tests.
SSO · OIDC + Entra
Per-tenant identity provider. Group-claim → role mapping. JIT provisioning. Break-glass admin access logged.
Data residency
SaaS hosted in your region of choice — EU, UK, or US. Self-hosted puts the question entirely in your hands.
SOC 2 roadmap
Type II target: 2027. Supplying structured security questionnaires today for enterprise procurement.
Container-level isolation
Each agent runs in its own OCI container with explicit resource limits. No shared process memory between agents.
DPA & contracts
Standard DPA covering sub-processors, retention, cross-border transfer. Available on request for diligence.
Transparent. Per tenant. Metered.
Pricing scales with tenants and token usage — not seat count. Self-hosted customers pay a yearly platform licence; SaaS customers pay a per-tenant monthly fee plus metered LLM pass-through at provider cost + a small margin.
Design-partner pricing available for the first three mid-market customers.
Start with a pilot. Scope and ship in weeks.
Design partners get hands-on help: we walk through the platform, scope the first two agents together, deploy them on your infrastructure with you.