Documents
Documents in AFFiNE is designed around All-in-one workspace combining docs, whiteboards, and databases with AI and tied to measurable business objectives.
Whiteboards
AFFiNE brings Whiteboards into a controlled workflow with roles, approvals and traceable data paths.
Knowledge Workspace
Knowledge Workspace can connect to operations, reporting and adjacent systems instead of remaining an isolated function.
AFFiNE Self-Hosting: Installation, Operations & Support
WZ-IT plans, installs, migrates and operates AFFiNE on your infrastructure (All-in-one workspace combining docs, whiteboards, and databases with AI), with monitoring, backups, updates and clear responsibilities. Instance and licence stay with you.
About the technology
What is AFFiNE?
AFFiNE addresses All-in-one workspace combining docs, whiteboards, and databases with AI. A running application alone is not enough for production: data, identities, integrations, updates and recovery have to be designed as one system.
Scoping focuses on Documents, Whiteboards, Knowledge Workspace, roles, data paths and recovery. WZ-IT turns these requirements into a documented target architecture and, on request, takes over migration, integration and ongoing operations on your infrastructure.
Functions and operating components for AFFiNE
Documents
Documents is configured and documented in AFFiNE around roles, data paths and operational requirements.Whiteboards
Whiteboards is configured and documented in AFFiNE around roles, data paths and operational requirements.Knowledge Workspace
Knowledge Workspace is configured and documented in AFFiNE around roles, data paths and operational requirements.Roles and access
Separate administrators, business users and technical accounts with traceable permissions.Interfaces
Connect APIs, webhooks, directory services and adjacent business systems in a controlled way.Data and recovery
Protect persistent data, configuration and restart procedures according to the agreed scope.Migration and takeover
Assess existing data and configuration, migrate them in a test run and move to managed operations through a controlled cutover.Identity and secure access
Secure SSO, roles, administrative paths and external access for the application and existing infrastructure.Backup and recovery
Back up all stateful components consistently and document the recovery path for the agreed scope.Updates, monitoring and operations
Monitor and update the application and its technical dependencies and operate them under the agreed service level.
Managed operations
Operating AFFiNE with clear ownership
In AFFiNE, user administration, business data, notifications, attachments and workflows meet editorial or organisational ownership.
Application platform
Operate runtime, dependencies, proxy and persistent components reproducibly.Data and state
Protect databases, files, configuration and retention in a traceable way.Integrations
Connect APIs, identities and downstream systems with defined failure paths.Maintenance and recovery
Combine monitoring, updates, backups, restore and incident response.
Area
Responsibilities without operational gaps
Platform operations, business configuration and integrations are separated and adapted to your environment in the proposal.
| Area | Responsibility | Scope boundary |
|---|---|---|
| Platform and runtime | WZ-IT | Deployment, hardening, monitoring, maintenance and technical documentation. |
| Backup and recovery | WZ-IT | Backup scope, supervision and agreed recovery exercises. |
| Configuration and roles | Shared | WZ-IT implements technically; your team approves business roles and permissions. |
| Business data and processes | Customer | Content, data quality and business decisions remain with the organisation. |
| Edition and licence | Shared | WZ-IT reviews the technical scope; required rights are agreed jointly. |
| Extensions and development | Expandable | Plugins, custom functions and deep integrations can be added as a retainer or project. |
Use and integration
Introducing AFFiNE around the actual process
Value is created when the application, data, permissions and downstream systems are designed as one end-to-end workflow.
Connect Documents
Data sources, APIs and import paths for Documents are versioned, protected and tested for failure states.
Connect Whiteboards
Identities, roles and process hand-offs around Whiteboards are aligned with existing business systems.
Connect Knowledge Workspace
Monitoring, notifications and exports for Knowledge Workspace route technical signals into the responsible workflows.
Record the version, edition, extensions and licence state of the AFFiNE environment
Review Documents including data, configuration and dependencies
Map Whiteboards together with connected identities and interfaces
Verify Knowledge Workspace, monitoring, backup and recovery in practice
Full operations on your infrastructure
AFFiNE - fully operated on your infrastructure
AFFiNE remains on your infrastructure. We define the operating scope, backup architecture and service level based on the existing system and its criticality.
Assessment and installationfrom €1,490 excl. VAT one-timeOngoing operations follow at the agreed service level.
Operations on your infrastructure
- Installation, configuration and ongoing operations
- Regular updates, CVE monitoring and prioritised patches for critical vulnerabilities
- Central logs with immutable retention
- 24/7 proactive monitoring
- Backup and retention according to the agreed architecture
- Five service levels, 24/7 P1 response with Production or Critical
- Infrastructure and data remain under your control
- Personal technical contact
Straightforward provisioning within a few business days
Payment
- Bank transfer
All prices are net and exclude statutory VAT. The offers are addressed to businesses. All on-premises options
Sizing and deployment location
Sizing AFFiNE for real usage
User count alone does not determine sizing. Concurrency, data volume, background jobs, integrations and recovery objectives define the required environment.
| Usage profile | Starting point | Decisive factors |
|---|---|---|
| Small production entry | Technical discovery | Users, data, integrations and protection requirements are classified. |
| Several teams or departments | Load and role profile | Concurrency, permissions and background processes are assessed separately. |
| High data or transaction load | Capacity assessment | Growth, I/O, caches and bottlenecks are measured or modelled. |
| Business-critical operations | HA and recovery design | Outage objectives, maintenance windows and restart targets shape the architecture. |
- The calculator is technical guidance. Data volume, high availability, integrations, migration, edition and service level are assessed before a binding proposal.
Sizing and deployment location
Available deployment locations
AFFiNE runs in your cloud, on premises or in a hybrid setup. The instance and, where required, the vendor licence stay with you; WZ-IT operates it on your behalf.
Your cloud
Operations in your existing cloud account with clear separation of platform and account ownership.On premises
Deployment in your data centre or server room close to internal data sources and business systems.Hybrid
Distribute application, data and integrations across locations through controlled private connections.
Target architecture
Embedding AFFiNE safely in the system landscape
Web access, identities, application, database and file storage are separated so business processes can be extended safely.
Business users and systems
Controlled use through browsers, clients, APIs or automated processes.
Access and network boundary
TLS, reverse proxy, private access and restricted administration paths.
Identities and roles
SSO, directory services, role model and technical service accounts.
AFFiNE platform
Application services, configuration, jobs and business runtime state.
Persistent data
Databases, object storage or files with a defined backup scope.
Interfaces
APIs, webhooks, queues and directory services connected to adjacent systems.
Operational signals
Logs, metrics, health checks and alerting for the agreed scope.
Production and administration access are separated; secrets and technical accounts are not kept in uncontrolled configuration files.
Licence and edition review
Offering AFFiNE with the appropriate usage rights
The licence has undergone a technical review. Before the proposal, we align edition, functionality, operating model and vendor terms with the concrete use case.
| Licence model | Reviewed on |
|---|---|
| Enterprise (Server), MIT/MPL (Rest) | 2026-08-24 |
- How licensing enters the proposal: The AFFiNE server is under an enterprise licence that ties production use to a subscription from the vendor. WZ-IT therefore operates AFFiNE only on your infrastructure and with your subscription. On request, we support you in obtaining any required vendor licence.
- AFFiNE is a trademark or product name of its respective owners. WZ-IT is an independent service provider, neither a partner nor a representative of the project, and is not affiliated with it.
- Open official licence source
Role in the overall system
Related services for AFFiNE
This page covers installation and the agreed platform operations for AFFiNE. Custom code, the access layer and special confidentiality requirements remain clearly separated responsibilities that can be added when needed.
Maintain the application
Support custom code and integrations
Keep custom extensions, interfaces and dependencies controlled, updated and supportable.
View service Secure accessConnect users, sites and systems
Add identity-based access and private network paths as a separate operational layer.
View service Operate confidentiallyAssess Section 203 requirements separately
For professional secrecy holders, define contractual, access and infrastructure requirements in a dedicated operating model.
View serviceThree relevant adjacent paths instead of a long list of further products.
View the overall systemFrequently asked questions about AFFiNE self-hosting
Answers about operations, migration, licensing, infrastructure and integrations.
- Depending on the agreed scope we take over target architecture, installation, secure baseline configuration, monitoring, backups, updates, recovery, documentation and technical incident handling. The instance runs in your environment and belongs to you.
- Yes. Before takeover we assess version, edition, data, extensions, identities, integrations, backup status and known legacy issues, then define a controlled takeover or migration plan.
- At the review date of this page, Enterprise (Server), MIT/MPL (Rest) was identified. Before deployment we verify the concrete version and edition again and document the applicable licence source. The AFFiNE server is under an enterprise licence that ties production use to a subscription from the vendor. WZ-IT therefore operates AFFiNE only on your infrastructure and with your subscription. On request, we support you in obtaining any required vendor licence.
- No. The licence terms of AFFiNE restrict operating it as a service for third parties. WZ-IT therefore installs and operates AFFiNE exclusively on your infrastructure, in your cloud, on premises or hybrid, and only within the scope of your licence.
- Typical integrations include SSO, email, calendars, CRM or ERP, payment and document services, and APIs. We clarify data ownership and process responsibility for every interface.
Reviews & projects
Client feedback and projects worldwide
WZ-IT moved our studio infrastructure from decentralised individual devices to a central platform: every site is securely connected via VPN, new devices are onboarded automatically and an entire site is provisioned from a template, without manual steps on location. What impressed me most is the breadth and depth of their knowledge: Timo and Robin are not a typical IT provider who sets up a server and leaves. The two of them think their way into highly complex infrastructure and software topics, work through every requirement we put in front of them, and build networking, provisioning and operations so that everything fits together in the end. WZ-IT is an excellent partner for complex software, network and architecture projects.
Steve KirchnerManaging Director, nextGYM GmbH
International
Built in Germany's Ruhr Valley. Running worldwide.
WZ-IT designs, develops and operates infrastructure and software for clients in Germany and internationally. We deliver projects remotely and continue supporting them in ongoing operations after go-live.
Selected projects
- LiveRemote access platform for distributed water treatment plantsABCO Water Systems · Australia · Secure Access & OT
- 81%AWS migration with substantially lower operating costsEVA Real Estate · UAE · Cloud exit & infrastructure
- 98%Provision new sites in minutes instead of hoursnextGYM GmbH · Germany · Automation & IoT
Read client reviews
- Secure your Proxmox & backup setup
- Modernize your infrastructure - sovereign
- Plan a sovereign open-source stack
- Integrate a local AI solution
- Modernize your legacy software
- Cut cloud cost - up to −81%
- Build a high-availability Proxmox cluster
- Virtualize with Managed Proxmox
- Design an open-source AI architecture
- Get collaboration fully managed
- Ship your prototype to production
- Connect sites and clusters securely
Full operations on your infrastructure
Enquire about operating AFFiNE on your infrastructure
Briefly describe the current state and objective for AFFiNE. We assess infrastructure, integration, and ongoing operations.
- Straight with Timo and Robin - no sales team, no pitch
- A professional assessment of your situation
- Concrete next steps for infrastructure, software or AI
The conversation is free and non-binding.
WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.
Jakob ÖschlbergerInno7 GmbH
WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.