Fifty-three open-source apps we operate. You own every one of them.

Pilae runs open-source apps on your own machines in Switzerland, or in one of our own regions. You keep the hardware, the data and the licence. We keep them patched, backed up, restorable and monitored.

Start with one workload

What “operated” covers

Anything in a catalogue can be deployed. These five are the difference between a deployment and something that is still running, patched and restorable next year.

A pinned version

A version we have run, not whatever latest resolves to that day.

A runbook

What it depends on, how it fails, what to do about it. In your repository.

A restore drill

Backups restored on a schedule. A backup nobody has restored is a file.

A patch window

Security updates in a window you agreed, with a rollback ready.

Someone watching

Every endpoint probed on the minute. An alert reaches a person, not a dashboard nobody opens.

Deployment is not the constraint. Operating is. These fifty-three are the ones we operate; anything else, we scope it before we promise it.

Where it runs: Your own hardware, or 10+ Pilae regions. In Switzerland and the EU: Zurich, Frankfurt, Falkenstein, Gravelines, Amsterdam, Helsinki.zur1, fra1, fal1, gra1, ams1, hel1, lon1, ash1, hil1, sin1, tok1, syd1
What it costs: A one-time integration fee, then a monthly fee per managed app.

pilae-agent · overnight window6 lines

02:00infobackup nextcloud database and bucket, verified offsite

02:04infoapply keycloak, rolling, no downtime

02:06infocheck login, oidc and smtp: ok

02:31inforestore drill from last backup: ok, 1m02s

03:00infoprune image cache, 4.1 GB freed

03:00infoaudit 14 events written, 0 failures

The shape of an overnight window: what runs, in what order, and what it reports.

AI and LLM

Models and the interfaces your team talks to, inside your perimeter. Prompts and documents stay on your side of the tunnel.

AI and LLM apps, and how to choose between them

Open WebUI

A chat interface over models you host, so prompts and the documents people paste into them never leave your network.

Replaces ChatGPT Team, Microsoft Copilot

Dify

A builder for AI apps, agents and retrieval workflows that runs next to your documents and your models instead of at a platform vendor.

Replaces OpenAI Assistants, Azure AI Studio

LibreChat

One chat interface over every model your organisation allows, local or hosted, with the keys, the history and the choice of provider held on your side.

Replaces ChatGPT Team, Poe

Ollama

A server that loads open-weight models on demand behind an OpenAI-compatible API, run on GPUs in Switzerland, the EU or your own datacentre so prompts never reach a model vendor.

Replaces OpenAI API, Azure OpenAI

vLLM

An OpenAI-compatible inference server for open-weight models, run on GPUs in Switzerland, the EU or your own datacentre, so prompts and answers never reach a model vendor.

Replaces OpenAI API, Azure OpenAI

Qdrant

A vector database for semantic search and RAG, run on your own hardware or in Switzerland and the EU, so the embeddings of your documents stay where the documents are.

Replaces Pinecone, Weaviate Cloud

Langfuse

Tracing, evaluation and prompt management for LLM applications, run in Switzerland, the EU or your own datacentre so the prompts and answers it records stay with you.

Replaces LangSmith, Helicone

Workflow and data

The automations and dashboards a department builds for itself, running where the data already is instead of where a SaaS keeps it.

Workflow and data apps, and how to choose between them

n8n

Workflow automation your own team writes, running next to the systems it talks to instead of reaching them across the internet.

Replaces Zapier, Make

Windmill

Scripts, workflows and internal tools in Python, TypeScript, Go, Bash or SQL, run by workers on your own machines and operated by Pilae.

Replaces Retool Workflows

NocoDB

A spreadsheet interface over a real database, so a department can build the tool it needs without anyone provisioning a new system.

Replaces Airtable

Directus

A data platform and headless CMS over your own SQL database. Editors get an admin app, and every table gets an API.

Replaces Contentful, Airtable

Metabase

Dashboards and questions on your own databases, run next to the data in Switzerland, the EU or your datacentre, with no per-viewer licence for the open-source edition.

Replaces Tableau, Looker

Grafana

Dashboards and alerts over your metrics, logs and traces, run in Switzerland, the EU or your own datacentre so the telemetry stays with you.

Replaces Datadog dashboards, New Relic

Matomo

Web analytics for your websites and apps, run in Switzerland, the EU or your own datacentre, with every visit stored in a database you own.

Replaces Google Analytics, Adobe Analytics

LimeSurvey

Surveys and research questionnaires with personal invitations and anonymised responses, run in Switzerland, the EU or your own datacentre so the answers stay in your jurisdiction.

Replaces SurveyMonkey, Qualtrics, Microsoft Forms

Data and streaming

The event streams, pipelines and stores a data team runs, placed next to the systems that produce the data rather than in a vendor region.

Data and streaming apps, and how to choose between them

Apache Kafka

Event streaming from the Apache Software Foundation, run as a KRaft cluster beside the systems that produce your events rather than in a vendor's cloud.

Replaces Confluent Cloud, Amazon MSK, Azure Event Hubs

Apache Flink

Stateful stream processing from the Apache Software Foundation, run next to your Kafka topics, with checkpoints and savepoints in object storage you control.

Replaces Confluent Cloud for Apache Flink, Amazon Managed Service for Apache Flink, Ververica Cloud

Apache NiFi

Data flows from the Apache Software Foundation that move files and records between systems and log every step, run beside those systems in Switzerland, the EU or your own datacentre.

Replaces Informatica PowerCenter, Azure Data Factory, Talend

Apache Airflow

Workflow orchestration from the Apache Software Foundation for data teams that write their pipelines in Python, run next to your databases in Switzerland, the EU or your own datacentre.

Replaces Astronomer Astro, Amazon MWAA, Google Managed Service for Apache Airflow

PostgreSQL

Managed PostgreSQL on dedicated machines in Switzerland, the EU or your own datacentre, with backups you can restore to the minute and upgrades you approve.

Replaces Amazon RDS, Azure Database for PostgreSQL

Garage

S3-compatible object storage that keeps every object in three zones, on your own hardware or in the Pilae regions you choose.

Replaces Amazon S3, MinIO, Wasabi

Apache Superset

Business intelligence from the Apache Software Foundation for data teams that write SQL, run next to your warehouse in Switzerland, the EU or your own datacentre.

Replaces Tableau, Power BI

Collaboration and identity

Files, documents, chat, and the single sign-on underneath them. One directory, one place to revoke an account.

Collaboration and identity apps, and how to choose between them

Nextcloud

Files, calendars and shared documents for the whole organisation, on storage you can point at in a room you control.

Replaces Google Drive, Dropbox, SharePoint

Collabora Online

In-browser editing of Word, Excel and PowerPoint files beside Nextcloud, on your own hardware or in the Pilae region you choose, so no document passes through someone else's cloud.

Replaces Microsoft 365 for the web, Google Docs

Mattermost

Team chat, channels and calls on a server in the country you choose, with the message history stored in your own database.

Replaces Slack, Microsoft Teams

Jitsi Meet

Video meetings people join from a link in the browser, run in Switzerland, the EU or your own datacentre so the servers that route the calls stay in the jurisdiction you picked.

Replaces Zoom, Microsoft Teams meetings, Google Meet

Element

Encrypted team messaging on the Matrix protocol: the Element apps on a Synapse homeserver you own, run in Switzerland, the EU or your own datacentre.

Replaces Microsoft Teams chat, Slack, WhatsApp

Outline

A fast, well-structured team wiki and knowledge base, on a server you choose, signed in through your own identity provider.

Replaces Notion, Confluence

BookStack

An MIT-licensed wiki of shelves, books, chapters and pages for documentation and runbooks, run in Switzerland, the EU or your own datacentre with sign-in from your directory.

Replaces Confluence, SharePoint wikis

Apache Answer

A question-and-answer site from the Apache Software Foundation for the questions your teams ask each other, run behind your own sign-on in Switzerland, the EU or your own datacentre.

Replaces Stack Internal, Questions for Confluence

Keycloak

Single sign-on for everything else you run, with your own directory as the source of truth and no per-seat bill between you and it.

Replaces Okta, Microsoft Entra ID

Vaultwarden

A password manager for the whole organisation, compatible with the Bitwarden apps, on a server you choose and with vaults only your people can decrypt.

Replaces 1Password, LastPass

Passbolt

A team password manager built on OpenPGP, where every shared credential is encrypted for each person who may read it, run in Switzerland, the EU or your own datacentre.

Replaces 1Password Business, LastPass, Keeper

Stirling PDF

PDF merging, splitting, conversion, OCR, redaction and signing in the browser, run in Switzerland, the EU or your own datacentre instead of on a public PDF website.

Replaces Adobe Acrobat online, iLovePDF, Smallpdf

Business

CRM, ERP, projects and scheduling. The records you are least willing to rent.

Business apps, and how to choose between them

Odoo Community

Open-source ERP for sales, invoicing, inventory, purchasing and manufacturing, operated on your own servers or dedicated machines in Switzerland and the EU.

Replaces SAP Business One, Microsoft Dynamics

Twenty

An open-source CRM for contacts, companies and deals, with a data model you shape yourself, operated on your servers or dedicated machines in Switzerland and the EU.

Replaces Salesforce, HubSpot CRM

Plane

Issues, cycles and roadmaps for engineering and product teams, on dedicated machines in Switzerland, the EU or your own datacentre.

Replaces Jira, Linear

OpenProject

Planning software for project offices, with Gantt charts and time and cost tracking, on dedicated machines in Switzerland, the EU or your own datacentre.

Replaces Microsoft Project, Jira, Asana

Zammad

Helpdesk and ticketing across email, web forms, chat and messaging, run on your own hardware or in Switzerland and the EU, with every customer conversation in your own database.

Replaces Zendesk, Freshdesk, OTRS

Chatwoot

One inbox for website chat, email, WhatsApp and social messages, run in Switzerland, the EU or your own datacentre so the conversation history is stored where you chose.

Replaces Intercom, Zendesk Messaging, Front

Cal.com

Booking pages synced with your calendars, run on dedicated machines in any of 10+ Pilae Cloud regions, six of them in Switzerland and the EU, or your own datacentre, from the MIT-licensed community edition of Cal.com.

Replaces Calendly

Paperless-ngx

OCR, filing and full-text search for scanned and emailed documents, run in Switzerland, the EU or your own datacentre so invoices, contracts and letters stay on storage you control.

Replaces DocuWare, M-Files

Documenso

Electronic signing for contracts and approvals, run in Switzerland, the EU or your own datacentre, with the sealed PDFs and their audit trails on storage you name.

Replaces DocuSign, Adobe Acrobat Sign

listmonk

Newsletters and mailing lists sent from your own domain, with the subscriber database in Switzerland, the EU or your own datacentre rather than with a marketing platform.

Replaces Mailchimp, Brevo

Kimai

Time tracking, billable hours and invoices for teams, run on your own hardware or in the Pilae Cloud region you choose, with no per-user fee for the open-source core.

Replaces Toggl Track, Clockify, Harvest

Engineering and security

Source code, container images, secrets and security events. The systems an auditor asks about first, kept where you can show them.

Engineering and security apps, and how to choose between them

Forgejo

Git hosting, code review, issues, packages and CI in one service, run in Switzerland, the EU or your own datacentre, with CI runners on machines of their own.

Replaces GitHub, GitLab.com, Bitbucket

GitLab

Git repositories, merge requests, CI/CD pipelines and registries in one application, run on your own hardware or in regions you choose, with runners on machines you place.

Replaces GitHub Enterprise Cloud, GitLab.com, Azure DevOps

Harbor

A private container registry that scans and replicates your images and caches Docker Hub, run in Switzerland, the EU or your own datacentre.

Replaces Docker Hub, Amazon ECR, Azure Container Registry

OpenBao

Secrets, certificates and encryption keys for your applications, run on your own hardware or in a Pilae region, with the unseal keys held by you rather than by us.

Replaces HashiCorp Vault, HCP Vault Dedicated, AWS Secrets Manager

Wazuh

Security monitoring with an agent on every server and workstation: logs, file changes, vulnerabilities and configuration checks, analysed and kept in Switzerland, the EU or your own datacentre.

Replaces Splunk Enterprise Security, Microsoft Sentinel

NetBird

Access to internal systems over WireGuard, granted by the groups in your directory, with the control plane run in Switzerland, the EU or your own datacentre.

Replaces Tailscale, Zscaler Private Access, Cisco AnyConnect

Apache Guacamole

A remote desktop gateway from the Apache Software Foundation: RDP, SSH and VNC sessions in the browser, signed in through your directory, recorded and played back where you keep them.

Replaces TeamViewer, NetScaler Gateway, Azure Bastion

GlitchTip

Error tracking and uptime monitoring that takes events from the Sentry SDKs, run in Switzerland, the EU or your own datacentre so stack traces and the user data in them stay with you.

Replaces Sentry, BugSnag

Questions

What does "operated" mean here?

We pin a version we have run, write a runbook before the first deployment, restore the backups on a schedule, and apply security updates in a window you agreed. Deploying an app takes minutes; keeping it running, patched and restorable is the work, and that is the part we sell.

Do you support an app that is not on this list?

Ask. We scope it, price the onboarding, and add it to this list once it has a runbook. What we will not do is promise to operate something nobody here has run, so the list grows one runbook at a time.

Where does it run?

On your own hardware, in your own cloud account, or in one of our own regions — Zurich, Frankfurt, Falkenstein, Gravelines, Amsterdam and Helsinki inside Switzerland and the EU, and six more beyond it. You choose per app. Moving an app between your hardware and one of our regions later does not change the contract or the price.

Who owns the deployment?

You do. The compose files sit on your machine, the credentials in your vault, the runbook in your repository. Pilae operates it. Pilae never owns it.

Is it really open source?

Most of it, and every page says which part. n8n and NocoDB ship under the Sustainable Use Licence, Outline and Directus under the Business Source License, and Dify and Open WebUI add conditions to a permissive licence: that is source-available, not open source, and it carries real restrictions. Several open-source apps also keep single sign-on or audit features in a paid edition. Each page names the licence its project actually uses, and what would need a commercial licence in your name.

What happens if we stop working with you?

Nothing stops. The exit plan is written before the first deployment, not after the last one: you keep the machine, the data, the compose files and the runbook, and removing our access is one command.

Bring us one workload. We will tell you what it takes.

Thirty minutes on one app you already run: what it would take to move it, operate it, and hand it back.

Start with one workload Book a 30-minute briefing