# Deployment and security - hosted in India, or on your own server | FOCTTA

> Run FOCTTA hosted in India with a dedicated database per organisation, connect your own PostgreSQL, or install it on your own server.

Web page: https://foctta.com/deployment  
This Markdown copy has the same content as the web page. Built 2026-10-14.

---

Deployment and security

# Four ways to run FOCTTA. Your data stays where your regulator expects it.

Hosted on AWS in Mumbai and isolated per organisation, or run it yourself: on your own database, your own server, or your own cloud account on AWS, Azure or Google Cloud, with nothing sent to us by default.

**01 FOCTTA cloud, AWS Mumbai**
A dedicated database per organisation, by default.

**02 Shared and isolated**
Row-level security in the database, for teams that want the fastest start.

**03 Your own PostgreSQL database**
FOCTTA connects to and migrates your database.

**04 Your server or your cloud**
Updates arrive only as signed archives.

On your own server

## One server, Linux or Windows. Signed from end to end.

The bootstrap installs Docker itself. Use the bundled PostgreSQL or your own, your CA and TLS certificates, with backup, restore and rollback built in.

Consent only **2 vCPU · 8 GB** 60 GB disk

With Discovery (DSPM), Activity (DAM) or Detection (DDR) **4 vCPU · 32 GB** 200 to 500 GB disk

**Signed release packages**
The manifest is signed and verified, and every image digest is checked before anything installs.

**Software bill of materials SBOM**
One for every image, in CycloneDX, named by image digest.

**Images scanned before release**
Fixable high and critical findings are cleared before each release.

**Licence never locks you out**
Writes stop after a grace period. Reads are never blocked.

**Nothing sent to FOCTTA**
It sends nothing unless you configure it to.

**Outbound-only edge agents Pilot**
They carry consent mirroring and rights jobs over outbound HTTPS only.

**FOCTTA Receiver Beta**
PostgreSQL, MySQL, SQL Server, Oracle or MongoDB.

## Security that shows its working.

Our terms commit to 99.9 percent uptime on the hosted service.

Sign-in tied to your organisation Your organisation's address accepts only your own users.

**Your company sign-in SSO · SCIM · MFA**
SAML 2.0, OIDC, SCIM 2.0 and TOTP with backup codes.

**Separation of duties**
8 roles, 144 permissions and custom roles.

**Personal data encrypted**
Encrypted with AES-256-GCM.

**No raw visitor IPs kept**
Pseudonymous: kept only as keyed hashes.

**An audit trail of changes**
Each change writes a hash-chained event and a receipt.

Service credentials sealed Keys for the services you connect are sealed per organisation.

Accessibility report An accessibility conformance report is available on request. WCAG 2.2 AA

## Tell us where your data has to stay. We will show you how FOCTTA fits.

[Talk to us about hosting](https://foctta.com/company)