Postgate AI on your own servers.
The self-hosted edition runs on your servers and with your own AI client. Your people sign in the way they already do today. This page shows what is included.
The service runs on your side and acts with your users rights.
Two questions decide whether this fits your setup. Both are answered first.
Everyone acts with their own rights
There is no service account and no impersonation. Every request runs under the account of the person who made it. What a user may do in Exchange, the assistant may do for them, and nothing beyond that.
Runs on your own servers
Everything runs on your servers. You bring your own AI client and connect it over MCP, so you decide which model is used. On its own the service calls a language model for two features only, the assistant and semantic search, both can be switched off, and both may point at a model in your own data centre.
Sign-in and mailboxes the way you already run them.
The service uses what is already there. It needs no new accounts and no second directory.
Sign in with what you already have
Sign-in works with NTLM, Basic or Modern Auth against your local AD FS. For cloud and hybrid the service uses Microsoft Entra. AD FS is still beta, and with it the service holds one token per user instead of a domain password.
Exchange on site and Exchange Online together
Mailboxes on your own servers are reached over EWS, mailboxes in Exchange Online over Microsoft Graph. Both run side by side in the same setup. You choose the route per organisation.
Teams per organisation
The service creates meeting links and reads presence status. It is enabled per organisation. The case we build for is hybrid, so the mailbox on Exchange and Teams in Microsoft 365.
You see every call and can step in at any time.
Whoever allows something has to be able to stop it again.
Audit log
Every tool call is written to a log. The entries are chained with hashes, so nobody can change them afterwards. You can forward the log to your SIEM or to syslog.
Sending limit and emergency stop
You set how many recipients one person may write to per hour. And there is a switch that lets an administrator stop everything at once.
Your Exchange server is spared
Each user has a cap on the number of requests. If Exchange slows down, the service backs off on its own and tries again later. Repeated queries come from the cache instead of from the server again.
Documents you can hand over.
Two duties come round regularly. The service produces a paper for both.
EU AI Act
The service produces a sheet on the EU AI Act that you can hand to your supervisory body. If a signing key is set up, the sheet is signed.
GDPR deletion
Deletion requests are carried out. Each deletion comes with a receipt you can use as proof.
What the people in your company get out of it.
Three features show up in daily work.
Semantic search
Search finds mail by what it is about instead of by the exact word. The vectors stay on your servers. You can switch the search on and off, independently of the cache.
Preferences
Instead of guessing, the assistant asks once, for example which address applies when a contact has several. The rule then keeps applying, for one person, a team or the whole company as you choose. In the portal you can look at the rules and remove them.
Mail in your house style
Add-on moduleThe default font can be set, so typeface, size and colour, either as a suggestion or as a rule. Signatures are managed the same way, for the whole company, a team or one person, with separate versions for inside and outside, the long one for new mail and the short one for replies. A trade fair banner expires on its own once its date has passed.
Want to run this on your own servers?
We go through the self-hosted edition against your environment and tell you what it takes.