Choose where DashboardFox runs: our cloud, your own server, or your data center
Most teams start on Shared Cloud the same day. Teams with a security review, a BAA requirement, or data that can't sit on shared infrastructure get a dedicated server we manage for them. Teams that must keep everything in-house install it themselves.
We've passed enterprise security reviews, including a healthcare organization running PHI on DashboardFox under a signed BAA.
Shared Cloud
For teams that want to be reporting this week
Starter, Growth, and Scale plans · 7-day free trial
- Your own isolated database on DashboardFox-managed servers
- US or EU data region
- Row-level security, AES-256 at rest, TLS in transit
- Data Processing Agreement on every plan
- FERPA Education Data Addendum on any paid plan
- Priced by monthly active users, not seats
Enterprise Dedicated Cloud
For security reviews, PHI, and single-tenant requirements
Billed annually · invoiced, net-30
- Your own server: Standard Class, 64 GB memory, high-clock CPU
- Your own dedicated PostgreSQL database
- Unlimited monthly active users, subject to server capacity and Fair Use Policy
- HIPAA BAA available with the Compliance Tier
- We provision, patch, monitor, and upgrade it
- Security questionnaire and review support
Self-Hosted
For air-gapped, government, and keep-it-in-house environments
Perpetual license · no subscription
- Runs entirely on your infrastructure
- We have no access to your data
- No BAA or addendum needed from us
- Your network, your controls, your audit scope
- The option for CJIS, FedRAMP, ITAR, and air-gapped environments
- Move from cloud to self-hosted later if needs change
What changes between the three
Features are identical everywhere: row-level security, white-label branding, the report builder, scheduling. What differs is who owns the machine and who signs what.
| Shared Cloud | Enterprise Dedicated Cloud | Self-Hosted | |
|---|---|---|---|
| Server | Shared, DashboardFox-managed | Yours alone, DashboardFox-managed | Yours, you manage |
| Database | Isolated per customer | Dedicated PostgreSQL | On your infrastructure |
| Data location | US or EU region | Region of your choice | Wherever you install it |
| Who patches and upgrades | We do | We do | You do |
| HIPAA BAA | Not offered | Yes, with Compliance Tier | Not needed (no vendor access) |
| FERPA addendum | Yes, any paid plan | Yes | Not needed (no vendor access) |
| GDPR / UK GDPR / CCPA DPA | Yes | Yes | Not needed (no vendor access) |
| Users | 5 to 100 monthly active users by plan | Unlimited, within server capacity and Fair Use Policy | By license |
| Pricing | $99 to $499 per month | From $1,499 per month, billed annually | From $4,995 one-time |
| Time to start | Minutes | Days, once the agreement is signed | Depends on your provisioning |
On-premise isolation, without provisioning anything
Customers often come to us wanting on-premise, then find that getting servers approved and built internally takes longer than vetting a cloud vendor. Dedicated Cloud gives them the same single-tenant isolation, and we run it.
Included from $1,499/month
- Dedicated server, Standard Class: 64 GB memory, high-clock CPU
- One production workspace
- Dedicated PostgreSQL database
- Unlimited monthly active users, subject to server capacity and Fair Use Policy
- Unlimited custom domains, branding policies, and public view licenses
- Per-tenant datasources and SSH tunnel
- Dedicated support
- Annual term, invoiced with net-30 terms
Add what your project needs
- Compliance Tier
- We operate as your HIPAA business associate under a signed BAA, backed by a standalone $5M cyber liability policy and raised E&O and general liability limits. A flat annual fee, not a per-user uplift.
- VIP Services
- An annual block of engineering hours with priority access to the product team, for implementation, custom visualizations, environment setup, and escalations.
- Infrastructure
- Additional workspaces (including a development workspace with Server Sync), a Performance Class upgrade to 128 GB, high availability with database replication, or additional dedicated servers for separate projects.
Add-ons are quoted to your requirements and can be added mid-term, prorated.
Which deployment fits your regulation
Our rule: where an agreement makes us directly responsible for regulated, individual-level records, that data runs on a server that is yours alone.
| If your data falls under | Use | What we provide |
|---|---|---|
| HIPAA (PHI), including 42 CFR Part 2 records | Enterprise Dedicated Cloud with Compliance Tier, or Self-Hosted | Business Associate Agreement, dedicated server and database, $5M cyber liability coverage |
| FERPA (student records) | Any paid plan | FERPA Education Data Addendum on request |
| GDPR, UK GDPR, CCPA, PIPEDA, Australian Privacy Act | Any plan | Data Processing Agreement, EU or US data region, subprocessor list |
| Financial services vendor reviews (GLBA and similar) | Enterprise Dedicated Cloud or Self-Hosted | Single-tenant isolation, questionnaire support, SLA, breach notification policy |
| CJIS, FedRAMP, ITAR, air-gapped networks | Self-Hosted | Software that runs entirely inside your accredited environment, under your own controls |
| PCI DSS (cardholder data) | Not supported | Keep cardholder data out of connected sources; report on tokenized or aggregated data |
This table describes what DashboardFox offers, not legal advice. Your compliance team decides what your organization requires.
