Skip to content

Products

Compliance Officer Service Expert-led compliance, end to end Compliance Portal Share security documents securely Open-source platform Deploy Probo on your own infrastructure

Resources

Probo stories How teams get compliant with Probo Blog Ideas and guidance from the Probo team Guides & tools Practical compliance guides and free tools Love from Customers What customers say about working with Probo Changelog Latest product updates Download Get the Probo Agent

Company

About The people and vision powering Probo Careers Join the team building Probo Brand assets Official logos and visual resources Security Review our security and compliance posture
Overview Understand Probo and its core concepts Product Explore Probo's GRC capabilities Developers Explore GraphQL, CLI, MCP, n8n, and webhooks Deployment Probo Cloud, self-hosting, and configuration

Explore

GitHub Explore our open-source compliance tools

Self-hosting

Understand the supported architectures and responsibilities for running Probo

View as Markdown

Probo is distributed as a containerized application backed by PostgreSQL and S3-compatible object storage. A production deployment must provide durable data services, TLS, secrets, outbound email, backups, monitoring, and an upgrade process.

  • Docker Compose is intended for a single host and smaller installations. The production compose definition in the Probo repository runs probod with PostgreSQL and SeaweedFS.
  • Kubernetes uses the Probo Helm chart and is better suited to operators that already manage Kubernetes, ingress, secrets, and persistent services.

The Docker Compose and Kubernetes pages contain installation procedures and can be consulted when you are ready to deploy.

A self-hosted operator is responsible for:

  • restricting access to the application, database, and object storage;
  • generating and rotating strong application and integration secrets;
  • backing up PostgreSQL and stored files as one consistent system;
  • monitoring health, capacity, logs, and certificate expiry;
  • testing upgrades and rollback procedures;
  • configuring email and identity services used by the organization.

Review configuration and infrastructure security before exposing a deployment to users.