# Self-hosting and security

> How Koshra runs as a self-hosted Docker stack, how sessions and secrets are handled and where your data lives.

Canonical: https://koshra.com/docs/self_hosting
Last updated: 2026-11-02

Koshra runs on a server you control, next to the tools your team already uses.

## Own your AI team

Your server, your data, your agents and your tools, with nothing rented back to you. Koshra is built on an open source agent platform under the Apache 2.0 licence, and its bots can run on free open-weight models. Security has the details.

## The stack

Koshra runs as a small set of Docker containers: a web app, an API, a background worker, a supervisor and a Postgres database. Routines and tasks run on the server around the clock, not on a laptop.

## Sessions

Protected pages and API routes refuse requests without a signed-in session. The task and dispatcher routes also refuse requests from untrusted origins.

## Secrets

Provider keys and other credentials are kept in the app's encrypted secret store, not in chat or prompts.

## Your data

Chats, tasks, the Brain and bot memory are stored in the database on your server. Model calls go to the model provider you chose for that bot.

## Changes

We take a backup and write a rollback note before every production change.