What exactly does on-premise mean with you?

The server physically sits at your premises. You own the hardware and the data; we plan, build, connect and maintain the system - end-to-end, including operation on request.

On-premise or on-premises - which is correct?

Grammatically correct is "on-premises"; in the IT industry "on-premise" (short "on-prem") has become standard. Both mean the same: the software runs locally at your site, not in someone else's cloud.

How do you reach a local server from outside?

Via our German gateway: the server itself opens an outbound, encrypted tunnel - no open ports, no public IP needed. The gateway only relays ciphertext (TLS pass-through).

Is this §203-compliant?

It is suitable for confidentiality professionals because the data does not leave the building and we are obliged in writing as a contributing person. §203 (criminal law) and GDPR are separate legal spheres - on-premise addresses both. For the individual case, your specialist lawyer's sign-off is advisable.

We already use cloud - do we have to switch?

No. We build hybrid: sensitive data moves onto the local server, the rest stays where it is. Our gateway meshes the two.

DE EN

[email protected]

DE EN

On-Premise & Hybrid

Local infrastructure, sovereignly built and operated

WZ-IT plans, builds, connects and maintains infrastructure at your premises - from ready-made on-premise app servers to secure site connectivity to hybrid cloud/local systems. Innovative tech, software integration included, GDPR- and §203-ready.

Data stays in-houseCloud/local hybridOperated end-to-end§203-ready

Explore the AI Cube

Leading companies worldwide trust WZ-IT

What we build

One partner for local and hybrid infrastructure

Ready-made on-premise app servers

Open-source apps like Supabase - preconfigured on encrypted hardware at your site, installed and operated by us.

Site connectivity & secure access

Sites, home office and mobile access securely connected - via NetBird/WireGuard, without open ports. Our specialty, on the software side too.

Hybrid cloud/local systems

Sensitive workloads local, scalable ones in the cloud - cleanly meshed via our German gateway. You decide what runs where.

Innovative tech & software

From local AI to custom app integration - we develop and integrate, not just operate.

Modules

One server, many backends

The same secured framework carries any open-source app - whether you run it in-house or need to host confidentiality-professional data §203-ready. Supabase is the start.

Supabase

Available

Postgres backend (auth, storage, realtime, vector) - self-hosted on your hardware, §203-ready.

View

Local AI

Available as AI Cube

Local LLMs, RAG and AI assistants on your hardware - as the AI Cube (fixed price) or GPU server. §203-compliant.

View

Nextcloud

Coming soon

Sovereign file, collaboration and office platform - the on-premise Microsoft 365 alternative.

n8n

Coming soon

Automation and workflows in-house - GDPR-compliant Zapier/Make alternative.

The hardware

The WZ-IT On-Prem Node

A compact, encrypted on-site server - small enough for any server room or cabinet, powerful enough for your stack. Preconfigured, connected to the German gateway, maintained by us.

The compact node comes in S / M / L. For maximum confidentiality optionally as a larger EPYC class with SEV-SNP (Confidential), and as an HA pair on request.

Node from €1,999.90 excl. VAT

Operation & maintenance optional from €199.90/month - provider-independent, no lock-in.

How it works

Local directly, remote via the German gateway

The on-site server runs at your premises

The full stack runs on encrypted hardware in your rooms. Devices on site reach it directly over the LAN - fast, nothing leaves the building.

Reachable via the German gateway

For remote access the server itself opens an outbound tunnel to our gateway in Germany - no open ports, no public IP, works even behind CGNAT.

The gateway only sees ciphertext

TLS pass-through: the encrypted stream is only relayed, terminated only on your server. Cleartext never leaves the building - no US corporation, no CLOUD Act access.

Why local

Three reasons that make the difference

Data stays in-house

On-premise on your hardware - no data outflow, no CLOUD Act risk. Not even a German data centre run by a US corporation offers that.

Open source, no lock-in

Proven open-source stacks - operable internally, no vendor lock-in, no subscription that binds you.

§203 obligation

As a contributing person under §203 we are obliged to secrecy in writing - with criminal instruction, in addition to the DPA under GDPR.

Frequently asked questions

Free intro call

Let's talk about your project - honest and no strings attached

Straight with Timo and Robin - no sales team, no pitch
An honest take, including when we are not the right fit
Concrete next steps for infrastructure, software or AI

No risk: worst case, you leave with a clearer understanding of your project than before.

Let's Talk About Your Idea

Whether a specific IT challenge or just an idea - we look forward to the exchange. In a brief conversation, we'll evaluate together if and how your project fits with WZ-IT.

E-Mail

[email protected]

Leading companies trust WZ-IT