Design platform
Operate Penpot frontend, backend and supporting services.
WZ-IT operates Penpot for design and product teams with secure access, backups, updates, monitoring and planned upgrade paths.
Companies worldwide trust WZ-IT
The following are trademarks of their respective owners: Penpot (Kaleidos Open Source S.L.). WZ-IT is an independent service provider and has no business, partnership, or contractual relationship with these companies. We offer independent migration, installation, hosting, and operations services.
Penpot combines design libraries, prototypes and shared workspaces in the browser. This makes the platform part of the production development and approval process.
We configure the application, database, asset storage, mail and access and plan imports, SSO and scaling for the team and project volume.
A reliable backup includes the database, uploaded assets, configuration and relevant keys. We agree retention and restore procedures with you.
Compatibility of imported design files and plugins is tested with real projects; not every feature of other design tools can be transferred identically.
Application services, database, asset storage, fonts and mail must be protected and upgraded together.
Operate Penpot frontend, backend and supporting services.
Structure workspaces, sharing and access for designers and developers.
Protect database, uploaded assets and configuration consistently.
Monitor services, test releases and document restore.
WZ-IT operates Penpot; project structure, design content and publication remain customer-owned.
| Area | Responsibility | Scope and boundaries |
|---|---|---|
| Penpot platform | WZ-IT | Deployment, database, storage, proxy, monitoring and updates. |
| Backup and recovery | WZ-IT | Consistent protection of projects, assets and configuration. |
| Identity and teams | Shared | We configure supported access; the customer defines groups and owners. |
| Migration tests | Shared | We test imports while design teams validate fidelity. |
| Design content | Customer | Projects, components, rights and approval remain with the customer. |
| Custom integrations | Optional WZ-IT service | Identity, automation and design-system workflows are scoped separately. |
Collaboratively edit and comment on interfaces, components and prototypes in the browser.
Organise reusable components, colours, typography and libraries across teams.
Provide spacing, properties, assets and CSS-oriented information for implementation.
Create and share interactive flows and validate them with stakeholders before development.
Configure authentication paths and team access according to edition, directory and security requirements.
Integrate available interfaces and automation into design and development processes.
Assess existing data and configuration, migrate them in a test run and move to managed operations through a controlled cutover.
Secure SSO, roles, administrative paths and external access for the application and existing infrastructure.
Back up all stateful components consistently and document the recovery path for the agreed scope.
Monitor and update the application and its technical dependencies and operate them under the agreed service level.
A clearly defined operating scope instead of an opaque hosting flat fee.
We set up a test instance for you, usually on the next business day. No payment details required. After seven days it is deleted unless you continue.
We combine the right compute size with ongoing operations, backups, monitoring and a service level appropriate for the criticality of Penpot. High availability and recovery targets are designed separately where needed.
We also design custom hosting architectures, integrations and migrations around Penpot. Contact us for a technical assessment.
One managed standard Penpot application is included in the Starter workload. Business and higher levels add a flexible operations allowance for planned work during regular service hours. Select compute, additional applications, storage and the appropriate service level.
A workload is one compute instance with the applications agreed for it.
One standard app per workload is already included. Additional dedicated servers count as separate workloads.
€79.90 per started TB and month, including daily encrypted offsite backup with 7-day retention.
Enquiry
Briefly describe the current state and objective for Penpot. We assess infrastructure, integration, and ongoing operations.
Concurrent editing, project size, assets and history determine application and storage demand.
| Usage scenario | Technical starting point | Key factors |
|---|---|---|
| Small design team | S or M | Normal projects and limited concurrent editing. |
| Several teams and design systems | M or L | More projects, assets and collaboration. |
| Large import or migration | Migration assessment | Compatibility and asset volume are tested. |
| Business-critical design platform | Recovery and identity design | Availability, SSO and restore are agreed. |
Large migrations, enterprise identity and special storage requirements are assessed separately.
The platform can be hosted centrally or kept close to internal identity and development systems.
Dedicated instance on European infrastructure.
Deployment in your account.
Operate inside your company network.
Hosted platform with controlled identity or development integrations.
User access, application services, project data and integrations receive clear boundaries.
Browser access to projects, components and handoff.
Identity, groups and restricted administration.
Membership and access to shared design assets.
Design, prototyping, collaboration and developer handoff.
Projects, users, history and platform state.
Images, fonts, exports and backups.
Approved services through controlled interfaces.
Import fidelity depends on source format and Penpot version; representative projects should be tested before migration.
Answers about migration, backup, identity and operations.
Yes. We assess version, database, asset storage, mail and backup before cutover.
Compatibility depends on file features and current import support. We validate representative projects.
Database, assets, configuration and required secrets are protected and restored consistently.
Supported identity integration can be implemented after edition and provider review.
Yes. We can deploy and operate it in your environment.
As an alternative to managed hosting in the data centre, WZ-IT provides the hardware, configures Penpot, and handles hardening, monitoring, updates, backup and technical support. Access can be limited to the internal network or enabled through VPN and existing identities.
from EUR 349 excl. VAT / month · plus one-time provisioning and initial setup

These solutions are often used together with Penpot
These solutions offer similar functionalities and can be evaluated together
No risk: worst case, you leave with a clearer understanding of your project than before.


“WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.”
Whether a specific IT challenge or just an idea - we look forward to the exchange. In a brief conversation, we'll evaluate together if and how your project fits with WZ-IT.