Identity
Choose from Microsoft Entra ID, Okta, Google Workspace, Active Directory, SAML, and OIDC starting points.
Self-hosted and air-gapped
Run the complete workspace inside an environment you control.
Deploy the same TOW capabilities with Docker Compose in under 10 minutes, connect the services you choose, or run the stack fully air-gapped without external network access.
Deployment path
A documented operating model.
Validate each layer in your own environment.
- 01
Deploy
Install the application and persistent data services with Docker Compose in under 10 minutes.
- 02
Connect
Terminate traffic at your reverse proxy and choose authentication, storage, email, and AI providers.
- 03
Operate
Create organisation exports, track availability, and download completed bundles as part of your infrastructure process.
Control point
Connected when you want it. Fully isolated when you do not.
TOW supports fully air-gapped operation through Docker Compose. Keep the application, data services, authentication, storage, and any enabled AI provider inside the isolated environment.
- Docker Compose
- No external network access
- Local authentication
- Persistent storage
- Local or disabled AI
- Admin controls
Deployment choices
Keep important boundaries configurable.
Exports
Create full organisation exports and download completed bundles during their availability window.
AI
Use configured provider credentials, BYOK endpoints, or disable AI.
Air-gapped operation
Run the Docker Compose stack and its configured dependencies without external network access.
FAQ
Questions worth answering clearly.
Current product, deployment, and commercial boundaries.
Can TOW run fully air-gapped?
Yes. TOW supports fully air-gapped operation through Docker Compose when the application and every configured dependency remain inside the isolated environment.
How long does installation take?
TOW can be installed with Docker Compose in under 10 minutes.
Is TOW open-source?
TOW is source-available, not described as open-source. Review the repository license for the terms that apply.
Can we bring our own AI provider credentials?
Yes. BYOK configuration is supported, administrators can configure a locally reachable provider, or AI can be disabled.
See TOW in your environment