Self-Hosted Deployment
Inside Oman is the default. Inside your walls is an option.
The hosted product already keeps every conversation on servers in the Sultanate. For organisations whose obligations go further than that, the same product runs on your own infrastructure.
Default
Sovereign cloud
We run it on infrastructure inside Oman. Nothing to provision, nothing to patch, live in about a day. Conversations, transcripts, attachments, and reporting all stay in the Sultanate, in line with the Personal Data Protection Law.
Right for almost everyone, including most regulated businesses.
On request
Self-hosted
The same product deployed on your servers or in your private cloud tenancy, behind your network controls, under your identity provider, with an upgrade cadence you approve.
Right when a regulator or a policy requires infrastructure you own.
When it is worth the effort
Three reasons, and one bad one.
A regulator asked the question
Banks, insurers, and government-adjacent bodies in Oman are often required to keep customer data inside infrastructure they control, not merely inside the country.
The data is genuinely sensitive
Health records, legal matters, and anything touching national infrastructure. Where the answer to who else could technically read this has to be nobody, self-hosting is the answer.
You already run your own stack
Organisations with an established platform team frequently prefer one more service inside their perimeter over one more supplier outside it.
The bad reason
A general feeling that self-hosted must be safer. It is not automatically safer, and an under-maintained deployment on a forgotten server is considerably worse than managed infrastructure inside Oman. If nobody is going to patch it, take the hosted product and put the effort somewhere it pays.
The same product, nothing held back.
- Every feature of the hosted product, with nothing held back
- Website chat, WhatsApp, and email channels
- Tickets, follow-ups, lead pipeline, and reporting
- Arabic and English conversation handling
- Your own model hosting, or ours over a private link
- Deployment on your servers or your private cloud tenancy
- Air-gapped operation supported where required
- Single sign-on against your existing identity provider
- Audit logging exportable to your own tooling
- Backup and retention policies you set and control
- Upgrade cadence you approve rather than one imposed on you
- Support and updates from the same team in Muscat
FAQ
What platform and compliance teams ask us first.
Is the self-hosted version behind on features?
No. It is the same product. Upgrades are released to self-hosted customers on a schedule you approve rather than pushed automatically, which is usually the point of self-hosting, but nothing is withheld.
What does it need to run on?
A Linux environment with container support, either on your own servers or in your private cloud tenancy. We size it with you against your expected conversation volume before anything is provisioned.
Can it run without internet access?
Yes, for website chat with locally hosted models. WhatsApp is the exception: that channel requires outbound access to the WhatsApp Business Platform, because the messages physically arrive from there.
Who runs it day to day?
You do, with our support, or we manage it inside your environment under an agreement. Which of those fits usually depends on whether you already have a platform team.
Is the hosted version less secure?
No. The hosted product runs on infrastructure inside Oman with encryption and access controls in line with the Personal Data Protection Law. Self-hosting is about control and about specific compliance obligations, not about fixing a weakness.
How long does a self-hosted deployment take?
Longer than the hosted product, and the variable is almost always your side: provisioning, network approvals, and security review. The installation itself is measured in days.
Your website is quiet. Fix that.
Give us your website and we will have Chatbot.OM reading it today. Your customer data stays inside Oman.
Oman Personal Data Protection Law compliant · Data never leaves the Sultanate