Self-hosting and licensingThe application is a local binary. The Docker image exists only for the features that genuinely need a server: sync, collaboration, audit and push.The sync server imageASPECTDETAILWhat it doesCard sync across your devices, team collaboration on Crew and up, audit logging, phone push.What it storesEncrypted card and board data. You hold the key; the server sees ciphertext.Where it runsYour hardware. Or hosted by us, if you would rather not run it.What it never seesRepositories, worktrees, diffs, transcripts.
Licence activationOnline by default: a signed token in the OS keychain, bound to a device, re-checked daily, with a grace period if the network is down. For air-gapped machines, a licence file carrying a seat count and an expiry, activated from Licence → Use a licence key. Fleet can run its own licence server so no machine talks to us at all.Seats, upgrades and backupsSeats are assigned in the admin panel and freeing one takes effect immediately. Upgrades are a new image tag plus a migration on start; the data volume is the only state. Back up the volume and your encryption key: without the key, a backup is unreadable, by design.SSO, SCIM and plugin policyFleet adds SAML with any compliant IdP, SCIM provisioning and de-provisioning, admin-locked safety rules, and plugin policy: verified-only, allowlist or blocklist, forced plugins, version pinning, private registry mirroring.