Self-hosted workflow automation, secure by architecture
Self-hosted workflow automation is the honest answer to ERP data security: NgageFlow runs in your cloud from Docker images — or EX10-managed if you prefer — so the flows that touch IFS Cloud live where your data already lives. No silent exports, no vendor-side copy of your ERP.
Two ways to run it, one owner of the data
Choose the model that fits your team. Either way, the data is yours and stays that way.
Self-hosted in your cloud
Deploy from Docker images into your own cloud account or data center. Your network rules, your database, your backup and monitoring stack. NgageFlow becomes one more workload your platform team already knows how to operate.
- Runs entirely inside your network boundary
- You control upgrades, scaling and retention
- Choose your own AI model provider and region
Managed by EX10
Prefer not to run another platform? EX10 operates a dedicated NgageFlow environment for you — provisioned, patched and monitored by the team that builds the product. You keep data ownership; EX10 keeps the pager.
- Dedicated environment, not a shared pool
- Operated by the people who build NgageFlow
- A clean migration path to self-hosting later
What protects your ERP data, concretely
Six specifics — not adjectives — about how NgageFlow treats the data your flows and agents touch.
Data ownership stays with you
Flows, credentials and run history live in your database, in your infrastructure. Leaving NgageFlow never means asking for your data back.
Credentials encrypted at rest
Connection secrets — OAuth tokens, API keys, IFS credentials — are stored encrypted and are never exposed in flow definitions or logs.
Per-project isolation
Each team or customer works in a sealed project with its own flows, connections and run history. Nothing is shared unless you share it.
Role-based access control
Roles separate who builds, who publishes and who views. The people allowed to put a flow in front of the ERP are exactly the ones you chose.
Approvals gate the writes
Human-in-the-loop steps pause a flow before anything risky reaches IFS. A person reviews what an agent prepared, then approves or rejects.
No model training by NgageFlow
NgageFlow never uses your ERP data to train AI models. Agents call the model provider you choose, with data handled under your agreement with them.
Isolation and RBAC are platform features, not add-ons — see projects and roles on the platform page. One-click connections keep credentials out of users' hands entirely — see integrations.
Deploy inside the compliance boundary you already have
Your organization has spent years building controls around its systems — network segmentation, identity, backup, audit. A self-hosted NgageFlow deploys inside that boundary and inherits those controls, instead of asking you to extend trust to one more SaaS perimeter. Your auditors assess it the way they assess any internal workload, and your ERP data never gains a new home.
That posture comes from EX10's heritage serving IFS enterprises — the team behind NgageFlow — and it runs through the whole Ngage Suite: enterprise software should fit your rules, not replace them.
Security questions, answered straight
Where does our data live?
Self-hosted, everything lives in your infrastructure: NgageFlow runs from Docker images in your cloud, against your database, inside your network. With the EX10-managed option, EX10 operates a dedicated environment on your behalf. In both models, the data is yours — ownership never transfers.
Is our ERP data used to train AI models?
NgageFlow itself never trains models on customer data. When a flow or agent calls an AI model, the request goes to the provider you selected and is handled under your agreement and data policy with that provider — and self-hosting keeps that choice entirely in your control.
Is NgageFlow SOC 2 or ISO 27001 certified?
We do not claim certifications. NgageFlow is designed to deploy inside your existing compliance boundary: self-hosted, it inherits the network, identity, backup and monitoring controls your auditors already assess. For the EX10-managed option, talk to us about the requirements of your industry and region.
Deployment choices affect cost — see pricing — and what agents may touch is always yours to gate: how approvals guard writes.
Walk your security team through it
Bring your architects and your questions — we will go through deployment, data flows and controls in detail.