Open source under AGPL v3. Deploy to your infrastructure, own your data, update on your cadence. The full platform, unlimited users, every feature, on your terms.
Self-hosting KANAP is not a stripped-down tier. It's the full platform, with the full feature set, free of charge. These are the reasons teams pick it first.
Budget figures, supplier contracts, IT landscape, everything. On your servers, in your network. No third-party data processor to trust with your governance data, except the services you choose to connect, such as an AI model provider or an email relay. The agent runtime and its actions run there too, which matters when an auditor asks.
Unlimited users, unlimited workspaces, Plaid and agents with your own LLM key. Roll it out to the entire department without a pricing page spreadsheet.
Row-level security isolates tenants. Argon2 password hashing. HTTPS with certificates you control. Your VPC, your backups, your SOC.
AGPL v3 means the code is open. Your security team reads it, your architects extend it, your CISO sleeps better.
Docker Compose deployment runs in restricted networks. You build the images from the public source, and once built they make no mandatory outbound calls for core functions.
Pin the version you run, test an update, migrate on your change-window schedule. No forced updates, no surprise downtime.
KANAP is released under the GNU Affero General Public License v3. You get every classic open source freedom: use it, read it, modify it, distribute it. The copyleft provision means anyone who runs a modified version as a service must share their changes, which is how the project stays genuinely open.
A coding AI agent reads our documentation, installs every dependency, and configures the whole stack (Docker, PostgreSQL 16, MinIO, nginx, Let's Encrypt) on a clean Ubuntu server. You paste one prompt, confirm the steps, and log in.
A freshly provisioned Ubuntu 24.04 LTS host with sudo access, a DNS A record pointing your hostname at it, and outbound internet for packages and Let's Encrypt. Install your AI coding agent on the server (Claude Code, Codex, anything similar).
So the agent isn't prompted for your password on every step. You'll revert this at the end.
echo "$USER ALL=(ALL) NOPASSWD:ALL" | sudo tee /etc/sudoers.d/90-install-nopasswdOpen your agent and paste the prompt template from our docs, then fill in your hostname, admin email and (optionally) your email transport (Resend or SMTP). The agent reads the linked install pages, installs Docker, PostgreSQL 16 with the required extensions, MinIO, nginx and certbot, clones KANAP into /opt/kanap, generates strong credentials, builds the images and starts the containers. It also wires up TLS and auto-renewal. The agent asks for confirmation before running each command.
Log in at your hostname with the generated admin credentials, change the password, then remove the temporary passwordless sudo entry. Done. The full install log is saved at ~/kanap-install.md.
Modest requirements for a platform that runs the whole IT department.
Built to run like any other internal service.
Pin the version you run, test an update in pre-prod, apply it in your change window. Migrations run on boot, idempotent by design.
Standard PostgreSQL and file storage. Back them up with the pipeline you already run.
Containers write logs to stdout and expose a health endpoint. Point your existing stack at them (Prometheus, Loki, Datadog, whatever you already run).
Upload your logo, set your primary color. The admin branding page works the same in self-hosted as in cloud.
Enterprise SSO is part of the core platform. Add your Entra app registration to the configuration, then connect it from the admin console.
Bring your own LLM key for both Plaid and your agents, OpenAI, Anthropic, Ollama, or any OpenAI-compatible endpoint. The agent runtime and its actions run inside your own deployment. The only content that leaves is what you send to the provider you chose, plus short web search queries if you turn web search on.
Clone the repo and bring up the stack in under ten minutes. No account required, no trial countdown, just open source.