WZ-IT plans, builds, connects and maintains infrastructure at your premises - from ready-made on-premise app servers to secure site connectivity to hybrid cloud/local systems. Innovative tech, software integration included, GDPR- and §203-ready.
Open-source apps like Supabase - preconfigured on encrypted hardware at your site, installed and operated by us.
Sites, home office and mobile access securely connected - via NetBird/WireGuard, without open ports. Our specialty, on the software side too.
Sensitive workloads local, scalable ones in the cloud - cleanly meshed via our German gateway. You decide what runs where.
From local AI to custom app integration - we develop and integrate, not just operate.
The secured framework can run a range of applications from our open-source portfolio. Resource demand, security requirements, availability and licensing determine which workloads share a node and which remain isolated.
Postgres backend (auth, storage, realtime, vector) - self-hosted on your hardware, §203-ready.
ViewLocal LLMs, RAG and AI assistants on your hardware - as the AI Cube (fixed price) or GPU server. Suitable for confidentiality professionals because the data never leaves the building.
ViewSovereign file, collaboration and office platform - the on-premise Microsoft 365 alternative.
ViewAutomation and workflows in-house - privacy-focused Zapier/Make alternative.
ViewWe can install, integrate and operate these applications on suitable on-premises hardware. Network and access components such as NetBird or WireGuard are designed separately as part of the architecture and are therefore not listed as app modules.
Percona XtraDB ClusterDatabase
OpenSearchSearch and Analytics Engine
QdrantVector Database
MySQLDatabase
PostgreSQLDatabase
MariaDBDatabase
PrometheusMonitoring
MagentoE-Commerce Platform
PretixEvent Ticketing SystemA compact, encrypted on-site server - small enough for any server room or cabinet, powerful enough for your stack. Preconfigured, connected to the German gateway, maintained by us.
The compact node comes in S / M / L. For maximum confidentiality optionally as a larger EPYC class with SEV-SNP (Confidential), and as an HA pair on request.
Node from €1,999.90 excl. VAT
Operation & maintenance optional from €199.90/month - provider-independent, no lock-in.

The full stack runs on encrypted hardware in your rooms. Devices on site reach it directly over the LAN - fast, nothing leaves the building.
For remote access the server itself opens an outbound tunnel to our gateway in Germany - no open ports, no public IP, works even behind CGNAT.
TLS pass-through: the encrypted stream is only relayed, terminated only on your server. Cleartext never leaves the building - no US corporation, no CLOUD Act access.
On-premise on your hardware: local processing is possible, while external integrations, updates and remote access are configured deliberately and documented.
Proven open-source stacks - operable internally, no vendor lock-in, no subscription that binds you.
As a contributing person under §203 we are obliged to secrecy in writing - with criminal instruction, in addition to the DPA under GDPR.
Describe the site, applications, data, and required operational responsibility. We assess hardware, architecture, and secure connectivity.
Customer feedback on open-source selection, implementation, maintenance and long-term operations.
No risk: worst case, you leave with a clearer understanding of your project than before.


“WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.”
Whether a specific IT challenge or just an idea - we look forward to the exchange. In a brief conversation, we'll evaluate together if and how your project fits with WZ-IT.