Most companies do not want to run servers, but they also do not want their CRM in one vendor's cloud, their files in another and a different password for everything. The Node Platform gives you a third option: a private workspace where all of your business apps run together, behind one login, on isolated UK infrastructure that we operate for you.
You choose the apps. We run the platform. Your team just signs in.
Your own private tenant
Every customer gets a dedicated tenant: a private internal network with ring-fenced compute, memory and storage. Your apps run inside it and communicate with each other privately, so your workflow tool can reach your CRM without either being exposed to the internet or to any other customer.
Isolation is structural, not a policy promise. Another customer's traffic never crosses your network, and another customer's busy month never slows your apps down.
A private network that reaches your devices
Your tenant's network does not have to stop at the datacentre. Private WireGuard VPN extends it to your laptops, phones, servers and sites over managed WireGuard: devices join your own dedicated private address range, your apps keep fixed private addresses your devices can dial, and you decide which device reaches which app and port with self-service Layer 4 rules in your portal (with opt-in Layer 3 routing when a whole subnet should be reachable).
Keys are generated on your own device and never touch our servers, revocation is per device, and billing is metered per connected hour and gigabyte moved rather than per seat: a device that is switched off costs nothing. It is available now as a built-in platform feature, not an app you deploy: every workspace has it, one button away in the portal. How it works, in detail.
One login for every app
Each tenant has its own realm on our managed Keycloak identity platform. Staff sign in once and reach every app you have given them: files, CRM, helpdesk, automation, analytics, all connected through single sign-on.
Already running Microsoft Entra ID, Google Workspace or an LDAP directory? We federate it into your realm, so your people keep their existing accounts, your joiners and leavers process keeps working, and your security team keeps one source of truth for identity.
Add people and apps as you grow
Your administrators stay in control without raising a ticket:
Add staff in minutes: create accounts or let them flow in from your federated directory.
Control who uses what: grant apps to individuals or groups; access is enforced at the identity layer, so revoking someone removes them from everything at once.
Add apps when you need them: each new platform deploys into your existing tenant, joins your single sign-on and appears on the same invoice.
One bill, billed hourly: every app, every user and any GPU usage metered against one published rate card, on a single invoice, with no contracts or commitments. See how pricing works.
Bring your own app
The catalogue is where most customers start, but it is not a boundary. If you have a container image of your own, an internal tool, an API, or an open source app we don't carry, push it to your private registry and deploy it into the same workspace. It gets everything a catalogue app gets: TLS and a real address, your single sign-on in front with one toggle, nightly backups, monitoring, and hourly billing at a published tier.
Before you commit to a resource tier, we will even load-test your app free in a sandbox and recommend the cheapest tier that fits, so your first bill is the informed one, not the guessed one.
Audited, logged and observable
Logs from every app in your tenant flow to central logging, and user activity is fully audited: sign-ins, permission changes, administrative actions. When your auditor, insurer or security team asks who had access to what and when, the answer is a report, not an archaeology project.
Built for high availability
The platform is engineered for production from the start: redundant infrastructure, monitored around the clock, with backups, patching and upgrades handled by our engineers. This is the same discipline we apply to everything we host, and it is included, not an add-on tier.
Custom-built, off grid, and we run on it too
We did not buy this platform or rent it from a hyperscaler and put our badge on it. We designed and built it ourselves, from the virtualisation up, on hardware we own in a UK datacentre. We think of the result as off grid: deliberately independent of the commercial clouds and SaaS suites that most managed providers quietly resell. Being off grid is not nostalgia for running our own iron. It is what lets us see the whole system, fix any layer of it, and keep the keys.
It is also why the platform keeps getting better in the ways that matter to you. We use what we sell. Node Digital itself runs on the same platform, on the same tenants, the same single sign-on and the same hardware every customer gets, so we experience your day and meet the rough edges before you do. Read how we run our own company on it.
If you like to know what is under the bonnet, we have written it down: how the Node Platform is built, layer by layer, from Proxmox and TrueNAS through Kubernetes, Keycloak and our disaster-recovery pipeline, up to the language models we host ourselves.
Your data in one jurisdiction
Data sovereignty is a question of jurisdiction and control: can you point to exactly where your data lives and whose law governs it? Tenants run on our own UK infrastructure by default, in one jurisdiction (and a GDPR-adequate one), with a clear data residency commitment and an Article 28 data processing agreement you can generate and read right now. There is no exposure to the US CLOUD Act of the kind that comes with American SaaS platforms. For regulated sectors and for any business handling sensitive data, that is often the deciding factor. It is also why many clients start by replacing SaaS tools with open source alternatives.
Private AI on our GPUs
Node runs its own GPU infrastructure, available to any tenant. That means PrivateGPT assistants and retrieval augmented chatbots that work on your own documents, inside your own tenant, with nothing sent to a US AI provider. Your prompts, your data and the answers all stay in your workspace, covered by the same audit trail as everything else.
Open source, no lock-in
Every app on the platform is open source. Your data lives in open, standard formats on infrastructure you control the keys to. If you ever leave, you take the software and the data with you. We keep your business by being good at running it, not by making it hard to go.
Ready to see it with your own apps? Talk to us and we will map your current tools to a tenant, or start with pricing.
Frequently asked questions
What does a Node tenant actually consist of?
Each customer gets a dedicated, isolated environment: a private internal network, ring-fenced compute and storage, and their own identity realm. Your apps run inside your tenant and talk to each other privately. Nothing is shared with other customers' workloads or data.
How does single sign-on work across the apps?
Every tenant gets its own realm on our Keycloak identity platform. Your staff sign in once and reach every app you have enabled for them. If you already use Microsoft Entra ID, Google Workspace or LDAP, we federate your existing directory into your realm, so people keep the accounts they already have.
Can we manage our own users and control who uses which app?
Yes. Administrators add and remove staff, group them, and control which apps each person or group can reach. Access is enforced at the identity layer, so removing someone removes them from every app at once.
Is there an audit trail of what users do?
Yes. Logging is centralised across your tenant and user activity is fully audited, including sign-ins, permission changes and administrative actions. That evidence trail is available to you for security reviews, investigations and compliance.
Where is our data held and who can access it?
Your tenant runs on UK infrastructure by default, under UK jurisdiction, with a clear Article 28 data processing agreement. Data in your tenant is private to your realm; access is limited to the people you authorise and the Node engineers operating the service.
What happens if one customer's workload gets very busy?
Every tenant has guaranteed, ring-fenced resources. A busy neighbour cannot slow your apps down, and if your own usage grows you move to a larger resource profile rather than degrading. This is enforced at the platform level, not by policy alone.
Can we use the GPU capability for private AI?
Yes. Node operates its own GPUs, so tenants can run private AI workloads such as PrivateGPT and retrieval augmented chatbots next to their own data, inside their own tenant. Prompts, documents and outputs never leave your workspace.
Are we locked in to the Node platform?
No. Every app we run is open source and your data stays in open, standard formats. If you leave, you keep the software and the data, and you can run it yourself or move it to another provider.