(00)Home / Deployment

Choose whether Obscura serves one organisation or many, and then choose who runs the servers.

Obscura Enterprise serves one organisation and Obscura Cloud serves several, and you can run either one on your own servers or let Valid run it for you. The modules are the same in every option, so the choice is about hosting and licensing.

Discuss your deployment See the four options

(01)Two editions

Both editions run the same software, and the difference is how many organisations share one installation.

Obscura Enterprise

One organisation per installation

Obscura Enterprise is installed for a single organisation, so that organisation has the whole installation to itself.

Obscura Cloud

Many tenants on one platform

Obscura Cloud serves many organisations or business units on one platform. Each tenant has its own database schema, subdomain, passkeys, signing certificate authority, audit-chain key and file storage namespace.

(02)Four options

Each edition can run on your own servers or as a service that Valid runs for you.

Obscura EnterpriseRun by Valid

Who runs it
Valid runs a dedicated instance for your organisation alone, with its own virtual machine, its own domain and its own file-encryption keys.
Licence
An annual subscription.
Included
Valid looks after backups, monitoring and upgrades, and the backups get at least one restore test a year.
Suits
An organisation that wants its own installation without running servers itself.

Obscura EnterpriseYour servers

Who runs it
Your team runs Obscura on your own servers, and it can run on a fully closed network.
Licence
A perpetual licence plus annual support and maintenance, which covers updates, security patches, support, licence reissue and help with major-version upgrades. Your modules keep working even if support lapses.
Included
Obscura installs from a Docker Compose bundle, and a guarded updater backs up, updates, checks health and rolls back automatically if anything fails. Backups keep an off-server copy and go through a monthly restore drill.
Suits
An organisation whose documents must stay on its own infrastructure.

Obscura CloudRun by Valid

Who runs it
Valid runs Obscura Cloud as a shared service, and your organisation is a separate tenant on it.
Licence
A subscription, with seats sold in blocks of five and storage included.
Included
Each tenant's backups are encrypted, copied off the server and restore-tested, and monitoring and upgrade windows are part of the service.
Suits
An organisation that wants to start quickly without running any servers.

Obscura CloudYour servers

Who runs it
Your team runs the multi-tenant platform on your own servers.
Licence
A perpetual platform licence plus support.
Included
Each tenant keeps the same separation as on the service that Valid runs.
Suits
Groups, holdings and organisations that serve several companies or units.

(03)The same everywhere

Every edition and every hosting option comes with the same modules and the same sign-in options.

  1. Modules

    Every option offers the same modules, and your tier decides which modules you license.

  2. Sign-in and directory

    SSO with OIDC, LDAP and SCIM are included in every edition.

  3. External signers

    People outside your organisation who only sign never count as seats.

See the modules

(04)On a closed network

On a closed network, four services need an approved outbound connection, and everything else runs without calling out.

  1. Certified signing (PSrE)

    Certified signatures come from an external provider, so they need a connection to that provider.

  2. e‑Meterai

    e‑Meterai also comes from an external provider, so it needs an approved connection as well.

  3. Cloud AI provider

    A cloud AI provider needs a connection, unless AI runs on a model inside your network or is switched off.

  4. Push notifications

    Push notifications to Obscura Mobile need a connection to the push service.

The licence check is optional, so the server never needs to call Valid.

Plan your deployment

Tell us how many organisations you serve and where your documents must stay, and we will map the right option with you.

We go through hosting, licensing and the connections that your processes need, so the choice is clear before a pilot.

See the modules Discuss your deployment