Run GatherHub on your own infrastructure.
A single-tenant deployment of GatherHub for organisations that require full data ownership, PDPA compliance, and integration with internal systems.
Built for organisations with strict requirements.
When the SaaS edition isn't a fit, the on-premise edition keeps everything inside your perimeter.
Data residency
Keep all event, participant, and payment data inside your organisation or jurisdiction.
PDPA compliance
Meet Personal Data Protection Act requirements with data stored on infrastructure you control.
Full data ownership
Direct access to the database and storage. Export, audit, or migrate at any time.
Single sign-on
Integrate with your existing identity provider via SAML 2.0, OIDC, or LDAP / Active Directory.
Custom integrations
Connect to internal HR systems, CRMs, finance platforms, and ticketing tools through the API.
Dedicated performance
Resources scoped to your organisation alone. No noisy neighbours, no shared rate limits.
Choose how GatherHub runs.
One product, three deployment models. Pick the option that matches your platform team's operating model.
Docker Compose
Single-host install for organisations up to roughly 5,000 users. One install script, one environment file.
Best for: smaller deployments, pilots, dedicated VMs.
Kubernetes (Helm)
High-availability Helm chart for multi-node clusters. Horizontal scaling, rolling updates, pod-level isolation.
Best for: large deployments, existing K8s platforms.
Private cloud
We operate the same artifact inside a dedicated VPC on your preferred cloud provider. Same isolation, less operational overhead.
Best for: organisations without an internal platform team.
Engineered for regulated environments.
PDPA-compliant by design and aligned to SOC 2 controls so your security review goes faster.
PDPA compliant
Designed to meet Malaysian Personal Data Protection Act 2010 requirements. Data subject rights, consent records, retention controls.
SOC 2 aligned controls
Engineering and operational controls aligned to SOC 2 Trust Services Criteria for security, availability, and confidentiality.
Encryption everywhere
TLS 1.2+ in transit. AES-256 encryption at rest for database, object storage, and backups.
Comprehensive audit logging
Every administrative action recorded with actor, timestamp, source IP, and before/after state. Exportable to your SIEM.
Single sign-on
SAML 2.0, OpenID Connect, and LDAP / Active Directory. Just-in-time provisioning and group-to-role mapping.
Air-gapped install
Offline image bundle for fully disconnected environments. No outbound calls required after activation.
Role-based access
Granular permissions across event, organisation, and platform scopes. Custom roles supported.
Automated backups
Scheduled database and object storage snapshots to your S3-compatible target or NAS. Point-in-time restore.
Standard Linux infrastructure.
GatherHub runs on the same components your platform team already knows. No exotic dependencies.
Operating system
Ubuntu 22.04 LTS, RHEL 9, Rocky Linux 9, or Debian 12
Application runtime
Laravel 11 + Livewire 3 + Alpine.js, served by PHP-FPM 8.3+
Database
PostgreSQL 15+ (recommended) or MySQL 8.0+
Cache & queue
Redis 7+ for sessions, cache, and background jobs
Object storage
MinIO or any S3-compatible store for kits, certificates, exports
SMTP relay
Customer-provided outbound mail server with TLS
| Tier | Capacity | CPU | Memory | Storage |
|---|---|---|---|---|
| Small | Up to 2,000 users | 4 vCPU | 8 GB | 100 GB SSD |
| Medium | Up to 10,000 users | 8 vCPU | 16 GB | 250 GB SSD |
| Large | 10,000+ users | 16+ vCPU | 32+ GB | 500 GB+ SSD |
Sizing assumes a single all-in-one host. High-availability and Kubernetes deployments use distributed resources across nodes.
More than software.
Every Enterprise contract includes the people, process, and tooling needed to run GatherHub successfully.
Dedicated implementation
A delivery engineer guides install, SSO setup, data migration, and go-live across a 4-8 week project plan.
Priority support with SLA
Named support channel with response-time guarantees and an escalation path to engineering.
Custom branding
Your logo, colours, fonts, and email templates applied across every participant touchpoint.
Training & onboarding
Live sessions for organisers, crew, and platform administrators. Recordings and runbooks included.
Custom development
Optional engineering hours for bespoke integrations, reports, or workflows specific to your operation.
Quarterly updates
Tested releases with migration guides and an upgrade window. Security patches delivered out-of-band.
Pick the right edition.
| Capability | SaaS (Free) | Enterprise (On-Premise) |
|---|---|---|
| Hosting | Multi-tenant (managed) | Single-tenant (your infrastructure) |
| Data residency | GatherHub region | Your choice |
| SSO (SAML/OIDC) | Not available | On the roadmap |
| Audit log export | Limited | Full export to SIEM |
| Custom branding | On the roadmap | On the roadmap |
| Air-gapped install | Not applicable | Supported |
| Implementation support | Self-serve | Dedicated delivery engineer |
| Support SLA | Email support | Contracted SLA with escalation |
| Pricing | Free / Pro / Business plans | Annual licence + setup |
Common questions
Can GatherHub run in a fully air-gapped environment?
Yes. We provide an offline image bundle and an offline activation key for environments with no outbound internet access. Updates are delivered as signed bundles your team applies on a schedule.
How are updates and security patches handled?
Feature updates ship quarterly with migration guides and a tested upgrade procedure. Security patches are released out-of-band as needed and can be applied without a feature upgrade.
What does the licence model look like?
Enterprise is sold as an annual subscription per instance. The licence covers unlimited events, unlimited participants, and all add-ons. There are no per-user or per-event fees.
Can we integrate with our existing identity provider?
Single sign-on (SAML 2.0 / OpenID Connect) is on the enterprise roadmap. Talk to us about your identity-provider requirements and timelines for your deployment.
How long does implementation take?
Most deployments go live in 4-8 weeks depending on SSO complexity, data migration scope, and integration requirements. Your delivery engineer manages the project plan end-to-end.
Can we migrate from the SaaS edition?
Yes. We provide a documented migration path that exports your events, participants, certificates, and historical attendance data into the on-premise instance.
How is payment handled on-premise?
You connect GatherHub to your existing payment gateway (Stripe, Billplz, or other supported providers). Funds settle directly to your merchant account; GatherHub never touches the money.
Let's talk about your deployment.
Tell us about your organisation, your compliance requirements, and your timeline. We'll respond with a tailored proposal.
- PDPA compliant
- SOC 2 aligned controls
- Dedicated delivery engineer
- Self-hosted deployment