ISO/IEC 27001: The information security management system and external certification are in progress.
Security & self-hosting
Your data.Your infrastructure.
Pharen Hub can run as managed cloud, self-hosted or private deployment. You decide where workspace data lives, which models connect and which steps require human approval.
Standards & commitments
Clear status for security, privacy and open technology.
GDPR: Processes and deployments are being aligned with GDPR; the external review is planned for Q1 2027.
No model training: Workspace data is not used to train Pharen or generally available AI models. Third-party providers remain subject to their terms.
Open fair-code: The source code is inspectable and self-hostable. Fair-code combines transparency with sustainable product development.
Deployment models
Flexible deployment for your infrastructure.
Multi-tenant managed cloud: Operated by Pharen on Hetzner Cloud in the EU, including updates, backups and maintenance.
Standard · EU Single-tenant managed cloud: A dedicated Pharen instance on Hetzner Cloud, fully operated by us.
Dedicated instance
Bring your own cloud: A dedicated deployment in your Azure, AWS, Google Cloud or Hetzner environment.
Own environment On-premise
On-premise: Run it in your data center or Kubernetes cluster, independently or together with Pharen.
Self or assistedReliable data foundation
Storage and deletion: In a self-hosted setup, you decide where workspace data lives, who can access it and when it is deleted.
Configurable data flows: Whether external models or integrations process data depends on your configuration.
Your operating standards: Backups, retention, network boundaries and logs can follow your internal requirements.
Security architecture
Bounded access: Roles and permissions control which content and tools people and agents can reach.
Human approvals: Critical actions can be tied to decisions and approval steps handled by people.
Traceable work: Tasks, decisions and workflows remain visible in the shared workspace context.
Compliance & risk
Fewer external parties: Self-hosting can simplify assessments because more processing stays in your controlled environment.
Reviewable foundation: Open fair-code and controllable deployments create a clearer basis for security reviews.
No automatic compliance: Whether a setup meets every requirement still depends on operations, contracts, providers and processes.
Models & integrations
Providers by configuration: Depending on the setup, Pharen can work with selected, customer-owned, self-hosted or OpenAI-compatible models.
Narrow permissions: Integrations should be enabled only for permitted data, use narrow scopes and be revoked when no longer needed.
Clear responsibility: The terms, locations and data paths of selected providers remain part of your review.
Governance & admin controls
Workspace-wide rules: Central settings control roles, access rights and permitted tools across the organization.
Human approvals: Critical actions can be tied to decisions and approval steps handled by people.
Traceable work: Tasks, decisions and workflows remain visible in the shared workspace context.
Legal documents
Transparency
Security needs foundations you can verify.
The open fair-code approach makes the technical direction visible and reduces dependency on a closed SaaS black box.
FAQ
Questions & answers
Your IT runs the workspace on its own or controlled infrastructure. That gives you control over storage, network, access, deletion and technical operations.
No. Self-hosting can simplify the assessment, but it does not replace it. The complete setup, external models and integrations, contracts, permissions and internal processes still matter.
The product direction is the same. In managed cloud, Pharen handles hosting, updates and maintenance. With self-hosting, your IT carries that responsibility and gains more control.
Yes, depending on your configuration. External models and integrations create additional data flows that must be selected and reviewed separately.
Many teams start in managed cloud and evaluate self-hosting once customer, privacy or IT requirements become concrete. Plan that path with us early.
The operating organization does. Network, backups, updates, monitoring and recovery belong to your own operating model.
