European Space Agency (ESA)
Intergovernmental space programme
Connect with us
On-premise · Self-hosted · Air-gapped
Your communications. Your servers. Your jurisdiction.
Troop Messenger is a self-hosted, on-premise chat server for enterprise and government. Deploy it on your own servers, in your private cloud on AWS, Azure or GCP, or on a fully air-gapped network, and your messages, calls and files never leave your infrastructure.
- On-Premise
- Air-Gapped
- Private Cloud (Azure, AWS, GCP)
Trusted On-Premise by Defence, Space and
Government Organisations
Organisations that cannot put their communications on someone else's cloud.
Airbus Defence and Space
Defence and aerospace manufacturing
UKHO, Ministry of Defence, UK
National hydrographic and defence data
GMV Innovating Solutions
Technology solutions for space, defence and critical infrastructure.
- Indian Air Force
- Jindal Poly Films
- Transgrid
- OPG Power Generation
- Toppan Speciality Films
DEFINITION
What Is an
On-Premise Chat Server?
An on-premise chat server is team messaging software that runs entirely on infrastructure your organisation controls, in your own data centre, private cloud or an air-gapped network, instead of on a vendor's cloud. You hold the data, the encryption keys and the audit trail, which is why regulated organisations choose it.
On-Premise or Self-Hosted:
Two Names for the Same Model
'On-premise' usually refers to your own data centre. 'Self-hosted' is the wider term and includes your private cloud tenancy on AWS, Azure or GCP. Both mean the same thing for your data: no third party runs the servers.
Who Needs a
Self-Hosted Messenger
Defence and intelligence agencies, ministries and public bodies, banks and insurers, critical infrastructure operators, research institutions and enterprises whose conversations contain intellectual property.
What It Replaces
A self-hosted enterprise messenger replaces cloud tools such as Slack and Microsoft Teams, and stops staff from falling back on WhatsApp for work. Your teams get the same chat, calls and file sharing, with every message stored on your own servers.
Platform capabilities
What You Can Do With Troop Messenger
On-Premise Chat App
Troop Messenger combines secure messaging, video conferencing and enterprise-grade privacy controls in one self-hosted team chat platform, deployed on your own infrastructure. Every capability below runs inside your network, whether you choose on-premise servers, a private cloud or an air-gapped deployment.
Complete communication.
On your infrastructure.
01
Messaging
- 1:1 & Group Messaging
- Broadcast Messaging
- Disappearing Messaging
- Message & File Filters & Search
- Audio & Video Messaging
02
Video Conferencing
- Audio & Video Calling
- Remote Screen Sharing
- Jointly-Code Editor
- Waiting Room & Host Controls
- Ad-Hoc & Scheduled Conferencing
03
Security & Privacy
- End-to-End Encryption
- Multi-Factor Authentication
- Active Directory & LDAP
- Air-Gap Supported
- VPN, DMZ & MDM Operable
04
Deployment Options
- Self-Hosted & SaaS
- Linux/Windows Server Support
- AWS/Azure/GCP Supported
- High-Availability & DR Support
- Desktop, Browser, Android & iOS Apps
Data sovereignty
Data Sovereignty for Team Messaging: Why SaaS Fails the Test
Data sovereignty means your data is governed only by the laws of your own jurisdiction and stays under your control. With SaaS messaging, the vendor's country of incorporation decides who can compel access to your messages. Running your own on-premise chat server removes that exposure entirely.
01
Someone else holds your keys.
If the vendor generates and stores your encryption keys, they can be compelled to hand over readable data, whatever the contract says. On-premise, the keys sit with you, so there is nothing for a third party to hand over.
02
Residency is a promise, not a control.
A SaaS vendor can say your data stays in a region, but you can’t verify it. You also can’t stop sub-processors, backups or support access from touching it. On your own servers, the boundary is yours to audit.
03
The vendor decides when your tools change.
Updates, outages, feature removals and pricing changes all happen on the vendor’s schedule. Self-hosting lets you decide when to upgrade, so your environment doesn’t change underneath you.
04
Every provider adds another jurisdiction.
Each SaaS messenger puts another vendor, sub-processor and set of laws between you and your own conversations. On-premise removes that chain, so only your jurisdiction applies.
DECISION GUIDE
On-Premise vs Cloud Messaging:
Which fits your organisation?
Cloud messaging is quicker to start and the vendor runs the servers. On-premise messaging keeps data, encryption keys and audit logs under your control and can run on networks with no internet access. For regulated organisations, on-premise collaboration software is usually the only model that satisfies sovereignty and isolation requirements.
VS
| Criteria | On-Premise / Self-Hosted | Cloud (SaaS) |
|---|---|---|
| Where data is stored | Your servers or private cloud tenancy | Vendor's data centres |
| Who can compel access | Only authorities in your jurisdiction | Authorities in the vendor's jurisdiction too |
| Encryption keys | Held by you | Held by the vendor |
| Air-gapped networks | Supported | Not possible |
| Update timing | You decide when to upgrade | Vendor decides |
| Audit and compliance evidence | Full logs on your infrastructure | Depends on plan tier |
| Who runs the servers | Your IT team, with vendor support | The vendor |
| Time to start | About 24 hours with deployment support | Minutes |
DEPLOYMENT OPTIONS
Three Self-Hosted Deployment Options.
None of Them Involve our servers.
Run Troop Messenger as a private chat server on your own hardware, in your own cloud tenancy, or on a network with no internet path at all. The same secure collaboration platform in every model, with your data never leaving your perimeter.
DEPLOYMENT MODEL
Private Cloud
Runs on
Your own Azure, AWS or GCP tenancy
Built for
Data residency with cloud operations
Data leaving your perimeter
Never
DEPLOYMENT MODEL
On-Premise
Runs on
Your hardware, behind your firewall
Built for
Regulated enterprise and public authorities
Data leaving your perimeter
Never
Defence-grade tier
DEPLOYMENT MODEL
Air-Gapped
Runs on
A fully isolated network with no internet path
Built for
Defence and classified environments
Data leaving your perimeter
Never
AIR-GAPPED DEPLOYMENT
Air-Gapped Messaging for Classified and Isolated Networks
An air-gapped network (or air gap network) is physically isolated from the internet and from any unsecured network, so no data can enter or leave except through controlled, manual transfer. Troop Messenger is one of the few team messaging platforms that runs fully inside an air-gapped network, with messaging, calls, file sharing and audit logs all working offline.
How Troop Messenger Runs With No Internet Connection
- Installed from offline packages, with no download step on the isolated network
- License activation without any external call-back
- Updates delivered as signed packages through your approved transfer process
- No telemetry, analytics or external service dependencies
- Works with air-gapped computers and workstations across desktop and mobile clients on the isolated segment
Isolated environment
USE CASES
Who Deploys Air-Gapped Messaging
Defence forces, intelligence agencies, classified research programmes and critical infrastructure operators whose operational networks must never touch the internet.
DEFENCE-GRADE EDITION
Troop-GRIT: The Defence-Grade Edition
Troop-GRIT is the on-premise, air-gapped edition of Troop Messenger, built for military-grade command and control communication with lawful interception (TM-Monitor) and administrator-enforced controls.
Troop Messenger for defence ↗ Industries
On-Premise Messaging for
Regulated Industries
Built for organisations that cannot compromise on where data lives. Six sectors where on-premise deployment is a requirement, not a preference. In these sectors, on-premise solutions are how organisations meet regulation and protect intellectual property, and self-hosted corporate chat is where that starts.
Different missions.
Same priority.
Your data stays yours.01![Live Feed]()
DEFENCE & AEROSPACE
Learn more Classified handling on air-gapped networks
Programme communications that cannot touch the public internet, across prime contractors and their supply chains
02![Live Feed]()
BANKING & FINANCIAL SERVICES
Learn more Recorded, retained, and no off-channel messaging
Regulated firms must record and retain communications relating to transactions, and supervisors have pursued firms whose staff use personal messaging apps.
03![Live Feed]()
CRITICAL INFRASTRUCTURE & ENERGY
Learn more KRITIS and NIS2 obligations
Operators of essential services face hardened requirements on incident reporting, access control and supply-chain security.
04![Live Feed]()
MANUFACTURING & ENGINEERING
Learn more Your process IP is the company
CAD files, tooling specifications, process parameters and supplier terms move through internal chat every day.
05![Live Feed]()
PUBLIC SECTOR & RESEARCH
Learn more Data residency is not negotiable
Public authorities and research institutions operate under residency rules that most collaboration platforms cannot satisfy.
06![Live Feed]()
HEALTHCARE & LIFE SCIENCES
Learn more Patient data under GDPR, on staff devices
Clinical teams need to coordinate quickly and will use whatever is fastest, which is usually a consumer messaging app.
SECURITY & COMPLIANCE
Secure Self-Hosted Collaboration: Every Feature
in one platform.
Everything your teams need from self-hosted chat software, with the security controls your CISO requires. Messages, calls and files are encrypted and stored inside your own infrastructure, and every action is logged.
End-to-End Encryption
Every message, call and file is encrypted end-to-end.
On-PremiseLDAP / Active Directory & SSO
One source of truth for access, roles and deprovisioning.
On-PremiseRole-Based Access Controls
Permissions at feature level, not just account level.
SaaS & On-PremiseMulti-Factor Authentication
Enforced organisation-wide from the admin console.
On-PremisePost-Quantum Cryptography VPN
A PQC-secured tunnel established before any data exchange begins.
On-PremiseUnits
Segment the organisation by division or geography and control which units may communicate.
On-PremiseUser Authorisations
Staff request access to leadership with justification; leaders approve silently, for a set duration.
On-PremiseAudit Logs & Compliance
Every action logged and exportable, SIEM-ready via Syslog.
On-PremiseScreenshot & Recording Controls
Enforced by the administrator, not left to the user.
On-Premise1:1 & Group Messaging
Secure one-to-one and group conversations.
SaaS & On-PremiseGroup Management
Create, organise and administer team groups.
SaaS & On-PremiseAirtime Broadcast Groups
Announcement-only channels with no reply noise.
SaaS & On-PremiseAudio Messaging
Send voice messages on mobile and desktop.
SaaS & On-PremiseMessage Recall
Recall a sent message within 10 minutes; the recipient’s copy disappears too.
SaaS & On-PremiseOrange Member
Bring in clients or contractors as guests with restricted access.
SaaS & On-PremiseiBuzr
Store and reuse canned replies and templates.
SaaSUniversal Search
Find any message, file or contact across full history.
SaaS & On-Premise1:1 Audio & Video Calls
On any device.
SaaS & On-PremiseGroup Conferencing
Multi-participant calls with screen sharing built in.
SaaS & On-PremiseRemote Screen Share
Share a screen securely during a call.
SaaS & On-PremiseLow-Bandwidth Optimised
Calls hold up on satellite and high-latency links.
SaaS & On-PremiseParticipant Management
Add, remove, mute and organise attendees mid-call.
SaaS & On-PremiseCross-Platform Calling
Windows, macOS, Linux, iOS and Android.
SaaS & On-PremiseNoise Suppression
Background noise reduction built in.
SaaS & On-PremiseScheduled Meetings
Schedule conferences with automated reminders.
SaaS & On-PremiseBulk File Sharing
Send multiple files to users or groups at once.
SaaS & On-PremiseFile Search & Preview
Find and preview any shared file without downloading.
SaaS & On-PremiseSecure File Transfer
End-to-end encryption on every transfer.
On-PremiseJointly Code
A collaborative code editor with syntax highlighting.
SaaS & On-PremiseFile Access Controls
Control who can view, download or share, per user and group.
SaaS & On-PremiseOn-Premise Storage
Every file stored inside your own infrastructure, zero external egress.
On-PremiseForkout Broadcast
Send a file to hundreds of users and groups in one action.
SaaS & On-PremiseBrowser Pop-Out
Open conversations in separate browser windows.
SaaS & On-PremiseAdmin Console
Granular control over every feature, user and group.
SaaS & On-PremiseMobile Device Management
Compatible with solutions from all major MDM providers.
On-PremiseAudit Logs
Complete activity logs, timestamped and exportable.
On-PremiseIP Whitelisting
Restrict access to approved addresses and network ranges.
SaaS & On-PremiseBulk User Import
Add users in a single upload.
SaaS & On-PremiseUsage Analytics
Organisation-wide adoption and activity insight.
SaaS & On-PremiseCustom Branding
White-label with your own logo, colours and domain.
On-PremiseData Retention Policies
Configure retention to match your compliance obligations.
SaaS & On-PremiseREST APIs
Full API access across messaging, channels, users and admin.
SaaS & On-PremiseWebhooks
Push real-time events into any external system.
SaaS & On-PremiseSCIM Coming Soon
Automated user provisioning and deprovisioning.
On-PremiseLDAP / Active Directory
Sync your enterprise directory; roles and policies stay consistent.
On-PremiseNutanix
Native infrastructure-level integration.
On-Premise UNIQUE CAPABILITIES
Six Capabilities You Won't Find in Slack, Teams or Mattermost
Built for organisations that need more control, privacy and operational flexibility from their collaboration platform.
01
Burnout
A self-destructing private conversation. No backup, no trace; the chat disappears when the window closes.
02
Forkout
Send one message or file to hundreds of users and groups in a single action.
03
Quantum VPN
Protect network communications using quantum-resistant encryption, designed to safeguard sensitive data against current and future security threats.
05
Units
Hard segmentation of your organisation by division or geography, with enforced boundaries on which units can communicate.
04
User Authorisations
Junior staff request access to leadership with a stated justification. Leaders approve silently, for a defined period.
06
Orange Member
Bring contractors, clients and external parties in as controlled guests, without issuing full accounts.
FLEXIBLE DEPLOYMENT
Flexible Licensing for Every Deployment Model
Licensing scales with your user count and deployment model, whether you run on your own servers, in a private cloud or on an air-gapped network. Plans, license options and a cost comparison with cloud tools are available on our on-premise pricing page.
ON-PREMISE DEPLOYMENT
On-Premise Deployment in Four Steps. Self-hosted, without the engineering project
Open-source chat platforms hand you the source code and the operational burden that comes with it. Troop Messenger On-Premise deploys your own self-hosted chat server in four steps, typically within 24 hours, with dedicated deployment support and a custom SLA.
1
Install with Docker or the Windows Installer
Prepare the runtime environment on Linux or Windows Server.
2
Register Your License
Activate your license and set up your organisation.
3
Configure Your SSL Certificate
Enable encrypted connections on your own domain.
4
Apply Firewall Policies
Open the required ports and secure the deployment inside your network.
Technical specification
Operating system
Windows or Linux 64-bit (Ubuntu 16+, CentOS 7+, Fedora 28+, Debian 9+)
Database
MySQL 8+, bundled in the container or installed separately
Server, up to 100 users
4 GB RAM minimum, 8 GB recommended; Intel server-grade CPU or 2 vCPU; 2 GB free storage [Confirm the current supported OS versions.
Time to deploy 24 hours
Dedicated deployment support and a custom SLA included.
YOUR DATA YOUR INFRASTRUCTURE YOUR CONTROL
COMPARISON
Troop Messenger vs Slack, Microsoft Teams, Mattermost and Rocket.Chat
Capability comparison across on-premise and SaaS messaging platforms.
| Capability | Troop Messenger | Slack | Microsoft Teams | Mattermost |
|---|---|---|---|---|
| On-Premise / Self-Hosted | ✓ Full | No | Limited | Full |
| Air-Gapped Deployment | ✓ Yes | No | No | Yes |
| You own your data | ✓ 100% | Vendor holds | Microsoft holds | 100% |
| End-to-End Encryption | ✓ Yes | In transit only | In transit only | In transit only |
| IP-Based Access Restriction | ✓ Yes | No | Limited | Yes |
| Screenshot & Recording Control | ✓ Admin Enforced | No | No | No |
| Self-Destructing Messages | ✓ Built-In | No | No | No |
| Turnkey Deployment & Support | ✓ Included | N/A | N/A | Self-managed |
EXPLORE YOUR OPTIONS
Looking for a self-hosted alternative?
Compare Troop Messenger with popular collaboration platforms and find the right deployment model for your organisation.
A Self-Hosted Slack Alternative
Slack is cloud-only, so there is no Slack self-hosted edition. Troop Messenger is a self-hosted Slack alternative that gives your teams channels, direct messages, calls and file sharing on your own servers, with end-to-end encryption and air-gapped deployment that Slack cannot offer.
Troop Messenger vs Slack ↗
A Mattermost and Rocket.Chat Alternative With Commercial Support
Mattermost and Rocket.Chat are capable open-source Slack alternatives, and their free tiers suit small technical teams willing to self-support. Troop Messenger is the alternative for organisations that want turnkey deployment, a custom SLA and one accountable vendor, including for Rocket.Chat-style on-premise deployments on air-gapped networks.
A Self-Hosted Microsoft Teams Alternative
Microsoft Teams runs in Microsoft's cloud. Troop Messenger is a Microsoft Teams alternative for organisations that need messaging and conferencing inside their own network, with Active Directory and LDAP integration so it fits alongside your existing Microsoft environment.
Troop Messenger vs Microsoft Teams ↗FAQ
Frequently Asked Questions
Answers to the questions enterprise, government, and defence buyers ask most about self-hosted deployment.
What is an on-premise chat server?
An on-premise chat server is a team messaging solution deployed on infrastructure managed by your organisation or within an environment designated by your organisation. It enables employees to communicate and collaborate while giving your organisation greater control over hosting, access, and data management.
What is the difference between on-premise and self-hosted chat?
On-premise typically refers to software deployed on servers located within your organisation’s own premises or data centre. Self-hosted is a broader term that also includes deployments in your organisation’s private cloud or other infrastructure that you manage. In both cases, your organisation has control over the deployment and configuration, but the underlying infrastructure may be owned by your organisation or provided by a third-party cloud provider. Data control and privacy depend on the hosting setup and the applicable agreements.
What are the data sovereignty requirements for team messaging?
Data sovereignty requirements typically include storing messages and files within a specified jurisdiction, maintaining control over data access and encryption keys, retaining audit logs, and managing administrator permissions. Troop Messenger On-Premise enables organisations to host the platform on infrastructure they control, helping them manage data location, access, and governance in line with their internal policies and applicable regulatory requirements.
Can Troop Messenger run on an air-gapped network?
Yes, Troop Messenger can be deployed in air-gapped network environments, enabling organisations to use its messaging and collaboration capabilities within isolated networks. This is particularly useful for defence, government, and other organisations that require strict network isolation and greater control over their communication infrastructure.
What infrastructure does the on-premise chat server need?
It runs on Windows Server or 64-bit Linux with MySQL 8 or later. Up to 100 users needs 4 GB RAM minimum (8 GB recommended) and 2 vCPUs. Larger deployments use clustered, high-availability setups
Can I host Troop Messenger on AWS, Azure or GCP?
Yes. Besides your own data centre, you can self-host Troop Messenger in your private cloud tenancy on AWS, Azure or GCP. Your data stays inside your account, and high-availability and disaster-recovery configurations are supported.
Does Troop Messenger support Active Directory, LDAP, and single sign-on (SSO)?
Yes. Troop Messenger supports integration with Active Directory and LDAP for user synchronisation and directory management, along with SAML-based Single Sign-On (SSO) for centralised authentication.
How long does on-premise deployment take?
Deployment timelines depend on your infrastructure, operating system, network configuration, and deployment requirements. Our deployment team works with your organisation to complete the installation, license registration, security configuration, and required network setup. A typical deployment may take around 24 hours, subject to infrastructure readiness and deployment complexity. Support is provided in accordance with the agreed SLA.
How is Troop Messenger On-Premise licensed and priced?
Troop Messenger On-Premise pricing depends on your organisation's requirements, including the number of users and deployment needs. To discuss pricing and find the right option for your organisation, please , contact our team. (the underlined word, can we re-direct them to contact form in the same page sir ?)
Can we manage users and permissions centrally?
Yes. Troop Messenger provides administrative capabilities for managing users and access permissions. Contact our team to understand the user-management options available for your deployment.
GET STARTED
Deploy Your Own On-Premise Chat Server
self-hosted alternative?
Your data.
Your infrastructure.
Your decision.
Start a full-featured trial today, or talk to our deployment team about your environment. We will help you run Troop Messenger on your own servers, in your private cloud or on an air-gapped network.
Try it on your own server
A full-featured on-premise trial, installed in your environment and ready the same day.
No credit card required
Get started without entering any payment details.
15-day full-featured trial
Explore all features with no limitations.
Deployed in 24 hours
Our team can help you get up and running quickly.
GET IN TOUCH
Talk to our deployment team
Tell us about your requirements and we'll get back to you shortly.
On-Premise and Self-Hosted Messaging Guides
In-depth guides, comparisons and practical resources to help you plan, deploy and manage your self-hosted messaging environment.
To create a Company Messenger
get started
