Where does ROOTKey run: SaaS, private cloud or on-premise?
Short answer
ROOTKey runs as SaaS hosted in the EU, in your own cloud account, inside your own infrastructure, or as a hybrid that keeps the data on-premise with separate SaaS dashboards. SaaS is included on every plan; private cloud and on-premise are on the Enterprise tiers. Implementation takes 7 to 21 days, depending on the deployment model and existing integrations.
- SaaS
- 7 daysFastest path. API key + webhook setup.
- Private cloud
- 14 daysIaC templates + network peering.
- On-premise
- 21 daysFull infrastructure provisioning.
- Hybrid
- 18 daysOn-premise anchor + SaaS layer.
Four deployment models
The same platform in four places. What changes is where the data lives and whose infrastructure runs it.
| Model | Data location | In practice | Time to go live |
|---|---|---|---|
| SaaS | Managed by ROOTKey · hosted in the EU | Up and running with no new infrastructure, hosted in the EU. | 7 days |
| Private cloud | Your cloud provider · your account | In your own cloud account, under your control. | 14 days |
| On-premise | Entirely within your perimeter | Inside your infrastructure, without leaving your perimeter. | 21 days |
| Hybrid | On-premise for data · separate SaaS dashboards | On-premise anchor + SaaS layer. | 18 days |
Which plan includes which model
EU-hosted SaaS on every plan; private cloud or on-premise on Enterprise tiers.
| Deployment | Starter · Pro · Business · Advanced | Foundation | Infrastructure | Sovereign |
|---|---|---|---|---|
| SaaS Deployment | ✓ | ✓ | ✓ | ✓ |
| Dedicated Tenant | ✕ | ✓ | ✓ | ✓ |
| Private Cloud Deployment | ✕ | ✕ | ✓ | ✓ |
| On-Premises and Air-Gapped | ✕ | ✕ | ✕ | ✓ |
Prices and everything else each plan includes: Pricing · Enterprise pricing.
Where the data lives
Is my data stored in Europe?
On the SaaS platform, yes: your data is hosted in the EU, in line with GDPR. With Enterprise custom deployments (private cloud or on-premise), it stays wherever you decide.
Recovery module: encrypted snapshots are stored according to your configuration.
Certifications, encryption and the SLA: Trust.
How long it takes
Implementation takes 7 to 21 days, depending on the deployment model and existing integrations.
On Enterprise, the project starts with a proof of concept. From POC to live: 30 days.
- What the POC includes
- Cryptographic integrity report · Regulatory evidence pack · Full technical wrap-up session
Phases, the POC and pricing: Enterprise Hub.
Frequently asked questions
Do you store our data?
On the SaaS platform, ROOTKey hosts your data in the EU. With a private cloud or on-premise deployment, your data stays wherever you decide. For recovery, encrypted snapshots are stored according to your configuration.
What does Enterprise include that the Platform plans don't?
Enterprise includes dedicated infrastructure with no shared tenancy, a contractual 99.9% availability SLA, dedicated support and custom contract terms. A named account manager comes with the Infrastructure and Sovereign tiers, and Sovereign adds custom SLAs and air-gapped deployment.
Does using ROOTKey constitute data processing under GDPR?
It depends on the deployment model. On the SaaS platform, ROOTKey hosts the protected data in the EU and acts as a processor under a Data Processing Agreement. With a custom deployment where the data stays in your infrastructure, ROOTKey handles only fingerprints and metadata, never the files. A fingerprint is one-way and does not contain the data, but a fingerprint of personal data can still count as pseudonymised personal data under the GDPR, so cover ROOTKey's role in your processing records and the Data Processing Agreement. We recommend that your legal team confirms the roles that apply to your case.