Open WebUI Hosting as an AI Platform: Models, SSO and DPA
WZ-IT runs Open WebUI as a managed service and AI platform: your own instance on your own domain, models operated in Germany by German providers, without US clouds, SSO, DPA and a Section 203 supplementary agreement from the smallest package. On request the platform runs only in your network or on premises.
Open WebUI is an extensible, self-hosted AI interface for Ollama and OpenAI-compatible APIs. It brings models, chats, knowledge sources and tools into one interface and can run locally, in the cloud or as part of a hybrid architecture.
At WZ-IT, Open WebUI runs as a managed AI platform: instance, models, knowledge bases, SSO and operations come from one provider, with a DPA and a Section 203 supplementary agreement.
Intuitive interface inspired by ChatGPT with full Markdown and LaTeX support for mathematical formulas.
Ollama Integration
Seamless integration with Ollama for local LLM execution - supports Llama, Mistral, Gemma and many more models.
RAG & Document Chat
Local and remote RAG integration - chat with PDFs, Word, Excel, PowerPoint, web pages and YouTube videos.
Model Builder
Create custom models from Ollama base models, add custom characters and agents - directly in the interface.
Privacy & Offline Operation
Open WebUI can run entirely in your infrastructure. External model or search services are connected only when they are part of the agreed architecture.
RBAC & User Groups
Granular permissions, user groups and role-based access control for secure team environments.
Pipelines Framework
Modular extension model for custom RAG pipelines, function calling and further integrations, depending on version and configuration.
Multi-Model Support
Use multiple models simultaneously - OpenAI, Anthropic, Ollama and other OpenAI-compatible APIs in parallel.
Web Search for RAG
Integrate web search results directly into RAG conversations with various search providers.
Image Generation
Seamless integration of image generation for dynamic visual content in your chats.
Responsive Design & PWA
Optimized for desktop, laptop and mobile - installable as Progressive Web App with offline access.
Multilingual
Full internationalization with support for numerous languages - use Open WebUI in your preferred language.
Effortless Setup
Installation via Docker, Kubernetes, Podman or Helm Charts - with bundled Ollama or CUDA support.
Python Functions & Tools
Extend LLMs with custom Python functions, an integrated code editor and tool calling. Because functions can execute code and access networks, data or secrets, we deploy them with limited permissions and a documented approval process.
Document Extraction
Extract text from various formats while preserving structure and formatting for precise RAG integration.
Licence
Licensing notice
WZ-IT operates Open WebUI under the Open WebUI License with the original branding unchanged. No branding modification is made. On request, we support you in obtaining any required vendor licence.
Use Cases
Using Open WebUI in your organisation
Private ChatGPT Alternative
Dedicated chat interface with locally controllable data flows; offline operation is possible when models and dependencies remain local
Ollama Integration
Seamless integration with Ollama for local LLM execution without cloud dependency - Llama, Mistral, Gemma and more
RAG & Document Chat
Retrieval Augmented Generation for intelligent document queries and knowledge bases with PDFs, Word, Excel
Privacy-focused LLM
Local AI models without data transmission to external providers - for regulated industries and data protection
Team LLM Access
Multi-user environment with roles, permissions and individual chat histories for enterprise teams
AI Development Platform
Experiment with different LLMs, custom functions, Python tools and API integrations for AI development
WZ-IT AI platform
Open WebUI and the GDPR: models in Germany, DPA and Section 203
Open WebUI ships without models. The AI platform provides both: a dedicated instance, models operated in Germany by German providers without US clouds and without training on your inputs, a DPA and a Section 203 contract chain.
Your team picks gpt-oss-120b, Qwen or Ministral per task, works with knowledge bases, assistants and dictation, and signs in via SSO. We handle operations, updates and new models.
Open WebUI brings chat interface and RAG pipeline - but enterprise requirements demand more. We extend the frontend for your use cases.
Intelligent Model Routing
Problem
Different requests (code vs. text vs. analysis) need different models, but users shouldn't have to worry about it.
Solution
Pipeline that analyzes input and automatically routes to the optimal model (GPT-4, Claude, local Llama) - transparent to the user.
Enterprise RAG Integration
Problem
Internal documents (SharePoint, Confluence) should be searchable in chat without manually uploading them.
Solution
Automatic sync of enterprise documents into vector DB. With every question, relevant context from the knowledge base is injected.
Compliance Output Filter
Problem
LLM responses could contain sensitive info (PII, internal codes). Must filter before display.
Solution
Output pipeline that scans responses and masks or blocks sensitive data before displaying to user.
Open WebUI managed service
Open WebUI managed hosting: packages and prices
One fixed price per organisation and month, tiered by users and token allowance. The models are operated in Germany by German providers, without US clouds; SSO, DPA and the Section 203 supplementary agreement are included in every package.
Start package€149.9010 users included, net per month · cancel monthly
Included in the Open WebUI managed service
Dedicated instance with a .de domain included or your own domain or subdomain via CNAME
All models, knowledge bases, assistants and text recognition
Hosting in German data centres of German providers, no US clouds
DPA and Section 203 supplementary agreement
Updates, daily backup and 24/7 monitoring
Next-business-day support, various service levels available
Packages per month, net
Start · 10 users included · 75M tokens per month (fair use)
€149.90
Team · 25 users included · 300M tokens per month (fair use)
€399.90
Business · 50 users included · 600M tokens per month (fair use)
€699.90
Organisation · 100 users included · 1bn tokens per month (fair use)
€1,199.90
Additional users, up to 150 in the Organisation package
Every organisation gets its own instance on its own domain, with no data shared with other customers. Access and identity are part of the platform from the start.
Secure access
Reachable publicly via TLS or only from your network and via VPN, for example with NetBird.
Identity & policies
SSO with Microsoft Entra ID, Google or Keycloak, multi-factor sign-in and permissions per group.
Your own Open WebUI instance
Your organisation's chats, knowledge bases and assistants, hosted in Germany by German providers, on the App Node or on AI Cube.
Models & inference
gpt-oss-120b, Qwen and Ministral, operated in Germany by German providers, without US clouds; local on AI Cube.
Knowledge & data
Knowledge bases with search and reranking, text recognition for scans and Office files.
Tools & systems
Web search, assistants and interfaces; custom extensions as an additional service.
Hosted, on the App Node or on AI Cube: the setup stays the same, only the location of the instance and the models changes.
Role in the overall system
Related services for Open WebUI
This page covers installation and the agreed platform operations for Open WebUI. Custom code, the access layer and special confidentiality requirements remain clearly separated responsibilities that can be added when needed.
Frequently asked questions about operating Open WebUI
Specific answers on hosting, models, RAG, security, operations and licensing.
WZ-IT runs Open WebUI as an AI platform with models operated in Germany by German providers, at package prices per organisation, each net per month and cancellable monthly: Start €149.90: 10 users included, 75M tokens per month (fair use); Team €399.90: 25 users included, 300M tokens per month (fair use); Business €699.90: 50 users included, 600M tokens per month (fair use); Organisation €1,199.90: 100 users included, 1bn tokens per month (fair use). Additional users cost €14.90 each per month. Included are your own instance, models, SSO, DPA and the Section 203 supplementary agreement. A test instance runs free of charge for 7 days first; it is not Section 203 compliant. For your own GPU, high availability or more than 150 users we prepare a custom proposal.
The Open WebUI managed service means WZ-IT operates your Open WebUI instance including updates, daily backups, 24/7 monitoring, connected models and support. You manage users, knowledge bases and content; installation, patching and recovery are handled by WZ-IT.
Yes. Managed hosting by compute tier runs your Open WebUI instance in Germany, Switzerland or Austria on a size from XS to XL from €99.90 net per month, with updates, backups and monitoring. You bring your own models and API keys; WZ-IT does not provide a model connection. A confidentiality agreement under Section 203 German Criminal Code (StGB) is available on request at the German location. For professional secrecy holders there is the AI platform with DPA and Section 203 supplementary agreement or the Section 203 managed cloud.
With the AI platform, use relies on a DPA, processing exclusively in Germany by German providers and no use of inputs for training. With hosting only, without models, the data flow depends on the models and API services you connect yourself. Your data protection officer assesses your specific use; this is not legal advice.
The software can be used without a licence fee as long as the Open WebUI branding stays unchanged (Open WebUI License since version 0.6.6: exceptions for at most 50 end users, with written permission or an enterprise licence). Costs arise for operation, models and support. Details in the article Open WebUI licence: the branding clause for businesses.
From the Team package, the monthly price includes an application support budget: 0.5 hours in Team, 1 hour in Business and 2 hours in Organisation per month. It applies to appointments on usage, assistants, knowledge bases and permissions and carries no guaranteed response time. Unused time does not carry over. Further needs are charged by effort at the support rate of €120 / hour; development and integrations are separate engagements. The Start package includes support for incidents by the next business day, but no application support budget.
Yes. As an AI platform we run Open WebUI as your own instance with models operated in Germany by German providers at a package price, with updates, daily backup, 24/7 monitoring and next-business-day support. We also operate the platform on an App Node at your company; shorter response times are available through service levels.
Yes. On an App Node the platform runs at your company, with models running on AI hosting by a German provider in Germany. With AI Cube the models run locally as well. Other environments such as your own GPU servers or Kubernetes are planned as a custom proposal.
Open WebUI supports Ollama and OpenAI-compatible APIs. On the AI platform, gpt-oss-120b, Qwen and Ministral are ready to use, operated in Germany by German providers, without US clouds; on AI Cube local models run on vLLM. We connect your own models or further providers after reviewing data classes, quality and cost.
No. On the AI platform the models run on AI hosting by a German provider in Germany, so no GPU of your own is needed. For local models, AI Cube brings the GPU; your own models on dedicated GPUs are planned individually, for example on a managed GPU server.
Yes. Depending on the environment, we connect Open WebUI to Keycloak or Authentik and design SSO, MFA, groups, roles and secure network access together. Existing identity providers can be retained after an interface review.
We design ingestion, text extraction, embeddings, vector storage, metadata and source updates as one pipeline. For confidential content we also address permissions, citations, deletion concepts and the limits of subject-matter reliability.
Yes, as a custom proposal. After a technical review of version, database, knowledge bases and model connections, we define what moves into the AI platform and what needs to be cleaned up first.
On the AI platform we monitor the instance around the clock and back it up daily. On the App Node and AI Cube, monitoring and backup follow the operational scope of the device; retention and recovery targets beyond that are agreed individually.
The largest AI platform package includes 100 users and extends to 150 with additional users. For more users, high availability or several sites we prepare a custom proposal; load profile, failure impact, RTO and RPO determine the setup.
The current Open WebUI licence permits use with the original branding left intact. Removing or changing branding is subject to exceptions and may require an enterprise licence; the vendor's current licence is authoritative. We review technical implementation but do not provide legal advice.
From a knowledge base with an AI assistant and local AI integration to data sovereignty and ongoing operations.
AI Platform
We were looking for a secure yet easy-to-use alternative to the large American providers and came across WZ-IT. WZ-IT advised us on choosing the right models and implemented the integration for us. Beforehand, we were able to try everything out calmly on a test instance. Today WZ-IT runs Open WebUI for us on our own domain, with a convenient Microsoft login and open-source models hosted by a German provider. Our team can now work productively with AI without resorting to external tools or shadow AI. Working together is straightforward, and questions are answered quickly and clearly. With WZ-IT we also have a partner at our side for further AI projects. (translated)
Carl-Frederic KornHead of E-Commerce & Online Marketing, Krüger Dirndl GmbHSee the AI platform
Knowledge Management & AI
The knowledge from many years in the solar industry lived in the head of our former managing director, and it still lives in the heads of our employees today. We wanted to secure it, not as a folder full of notes, but in a way that lets us ask questions in daily work and get reliable answers. WZ-IT advised us from the start and weighed different approaches and knowledge management systems against each other with us before we decided. What was built is a custom knowledge base with an AI assistant that brings together conversations, notes, documentation and manuals: from the platform through onboarding our team to support in operation. Conversations are transcribed and facts are extracted; we review and correct everything ourselves before it is stored, because we do not want to trust an AI blindly. The system runs in our own environment, and the data stays with us. What surprised us was how efficient it was: WZ-IT used existing open-source software and extended it specifically for our requirements, instead of selling an expensive custom build from scratch, as is often usual with IT service providers. Timo and Robin understood our actual problem, preserving knowledge during the generational handover, and implemented it step by step: from the proof of concept through setup and validation with our own data to productive operation, explaining everything clearly along the way. Next, we want to extend this to the knowledge of our employees, so that this does not depend on individual people either.
WZ-IT designs, develops and operates infrastructure and software for clients in Germany and internationally. We deliver projects remotely and continue supporting them in ongoing operations after go-live.
Enquiry
Test the AI platform or choose a package
Tell us your number of users and tasks. We set up the test instance or recommend the right package; for your own GPU, high availability or more than 150 users we prepare a proposal.
Straight with Timo and Robin - no sales team, no pitch
A professional assessment of your situation
Concrete next steps for infrastructure, software or AI
The conversation is free and non-binding.
WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.