Self-hosting guide (roadmap)

Self-hosting is on the roadmap for teams that need their telemetry inside their own infrastructure: defense, fintech, healthcare, and regulated public-sector buyers.

The target experience is a single command — tcm deploy --vpc aws --project tcb_proj_... — that provisions a VPC, the ingestion engine, and storage inside the customer's own account with the customer's IAM. No Tracabit-issued credentials live in the install path.

Deployment artifacts are planned as a Terraform module and a Helm chart, cosigned and versioned, so infrastructure teams can review exactly what runs where. Egress is heartbeat-only: uptime and version, never event data.

This guide will ship alongside the VPC CLI. In the meantime, the hosted pipeline already supports per-project API keys, per-origin CORS, and EU data residency planning — teams that need control today can start there.