Identity
Configure organisation authentication and OIDC provider settings.
Self-hosted and air-gapped
Run the complete workspace inside an environment you control.
Deploy the same TOW capabilities with Docker Compose in under 10 minutes, connect the services you choose, or run the stack fully air-gapped without external network access.
Deployment path
A documented operating model.
Validate each layer in your own environment.
- 01
Deploy
Install the application and persistent data services with Docker Compose in under 10 minutes.
- 02
Connect
Terminate traffic at your reverse proxy and configure authentication, storage, email, and AI providers.
- 03
Operate
Manage secrets, backups, updates, workers, exports, and access as part of your infrastructure process.
Control point
Connected when you want it. Fully isolated when you do not.
TOW supports fully air-gapped operation through Docker Compose. Keep the application, data services, authentication, storage, and any enabled AI provider inside the isolated environment.
- Docker Compose
- No external network access
- Local authentication
- Persistent storage
- Local or disabled AI
- Admin controls
Deployment choices
Keep important boundaries configurable.
Data
Operate persistent storage, uploads, search, backup, and export paths.
AI
Use configured provider credentials, BYOK endpoints, or disable AI.
Air-gapped operation
Run the Docker Compose stack and its configured dependencies without external network access.
FAQ
Questions worth answering clearly.
Current product, deployment, and commercial boundaries.
Can TOW run fully air-gapped?
Yes. TOW supports fully air-gapped operation through Docker Compose when the application and every configured dependency remain inside the isolated environment.
How long does installation take?
TOW can be installed with Docker Compose in under 10 minutes.
Is TOW open-source?
TOW is source-available, not described as open-source. Review the repository license for the terms that apply.
Can we bring our own AI provider credentials?
Yes. BYOK configuration is supported, administrators can configure a locally reachable provider, or AI can be disabled.
See TOW in your environment