About Services Stack Live Work Audit Contact
15 containers live

Automation without surveillance.

Self-hosted AI workflows. Your data, your infrastructure, your control.

kaisa@privacyfirstautomation
Kaisa Thariq Muabbad

Most automation tools today store your workflows, client data, and business decisions on someone else's servers - and you never fully know where that data goes. At Kaisa Labs, we build systems that run on infrastructure you own. Not because privacy is a feature. It's how we build from the start.

We build automation that respects your boundaries.

Kaisa Labs is an independent software engineering lab. We build and run automation systems with privacy as the foundation, not an add-on.

We are not an alternative. We are a deliberate choice for businesses that refuse to hand their workflows, client data, and operational decisions to public SaaS.

Every system we build sits on a self-hosted foundation. We use open-source software under business-respecting licenses, among them Apache 2.0, GPL, and Sustainable Use. Everything runs on a Hetzner VPS, traffic encrypted with TLS 1.3, and not a single port open to the public internet.

The result: systems your internal team can audit, move without migration fees, and modify without vendor permission.

We don't sell software licenses. What we hand over is working infrastructure: documented line by line, handed over with credential rotation, and yours from day one.

  • 01

    Data never leaves your infrastructure without your decision.

    Every byte is processed and stored on servers you control, not on public SaaS that monetizes your data. When an external integration is genuinely needed, data moves only with your explicit consent, encrypted, and logged in the audit trail. An exception you decide, not a default we choose.

  • 02

    You receive the full configuration. No black boxes.

    Every deployment ships with source code, configuration files, architecture diagrams, and written SOPs. We do not ask you to trust us; we give you the means to verify every script, every setting, every integration point. And when you want to leave, nothing holds you back: no proprietary data formats, no exit fees.

  • 03

    Security is designed from the first commit. Never patched later.

    No port is open to the internet: all traffic enters through encrypted tunnels with OTP verification. Containers are isolated, access is least-privilege, and privacy-by-design follows UU PDP. This is the standard on every deployment, not a bolt-on.

Indonesian solo founder. 3 years building self-hosted stacks for businesses tired of surrendering their data to platforms they don't control. Based in Jakarta, serving clients across Indonesia and internationally.

Four engagement models.

Tier 01
Managed Automation Infrastructure
We manage and monitor your self-hosted automation stack. You process your own data, on your own terms. No shared SaaS, no hidden multi-tenant processing.
60-second checks. Telegram alert in 5 seconds.
Best for: advanced UMKM and corporates without internal IT team.
Tier 02
Build & Transfer
We build the complete stack, document every detail, and hand it over fully. You receive source code, configs, and runbooks. After transfer, it is entirely yours. No ongoing dependency.
Full IP transfer
Best for: enterprise, law firms, financial institutions.
Tier 03
Build & Retain
Built directly on your VPS, with Kaisa Labs on standby for maintenance and iteration. You own the infrastructure from day one. We provide ongoing support when you need it.
Your infra, our standby
Best for: internal teams with engineers needing escalation.
Tier 04
International Remote Retainer
Async-first retainership for clients outside Indonesia. Billing in USD via Wise or Stripe. We work around your timezone, not ours.
Async-first. USD billing.
Best for: remote-first startups and international teams mindful of vendor lock-in.

100% Offline RAG Pipeline

Ollama and ChromaDB. AI that reads your business documents, SOPs, invoices, and catalogs. Not a single file leaves your server. Combined with n8n workflows, this becomes a private automation brain for your business.

What We Do

  • Self-hosted AI stack (n8n, Ollama, ChromaDB, Docker)
  • Workflow automation for your specific business processes
  • Local RAG pipeline for internal documents
  • Infrastructure hardening and security audit
  • WhatsApp, Telegram, Email, Spreadsheet integrations
  • Migration from SaaS to self-hosted
  • Technical documentation and operational playbook

What We Don't Do

  • Custom LLM fine-tuning. Not our field.
  • Stacks on cloud vendors (AWS, GCP, Azure). Contradicts our philosophy.
  • Integrations that require data to leave your infrastructure without explicit consent.
  • Projects without a defined scope. We don't work on a 'wait and see' basis.

Clear boundaries protect you from scope creep and protect us from commitments we cannot fulfill. This is about integrity, not limitation.

Tools we trust. Open-source at the core.

15 containers running in isolated Docker. n8n, Ollama, ChromaDB, Corteza, Dolibarr, Ghost, Uptime Kuma, Redis. All bind to 127.0.0.1. Public access only via Cloudflare Tunnel with Access Policy. Zero external API dependency.

Automation

Kaisa Maps Enrichment

Self-hosted local business data extraction engine for structured market research and lead enrichment.

n8n

Fair-code workflow automation with 400+ integrations.

Redis

In-memory data store for caching, queues, and real-time events.

AI / LLM

Open Manus

Self-hosted autonomous AI agent framework for executing structured workflows without external API dependencies.

Ollama

Run Llama, Mistral, and other LLMs locally with zero data leakage.

ChromaDB

Open-source vector database for RAG and semantic search.

Open WebUI

Self-hosted chat interface for LLMs with conversation management.

Business

Corteza CRM

Open-source CRM and low-code platform for business workflows.

Dolibarr ERP

Complete ERP suite: invoicing, inventory, HR, and project management.

Publishing

Kaisa Content Tools

Internal content generation pipeline that automates the production of visual assets, documents, and presentation materials.

Ghost CMS

Professional publishing platform for content creators and newsletters.

Security

Cloudflare Zero Trust

Identity-aware proxy with zero-trust network access policies.

Cloudflare Tunnel

Secure tunnels without opening ports. No public IP needed.

Monitoring

Uptime Kuma

Self-hosted uptime monitoring and status page.

Databases

PostgreSQL

Advanced open-source relational database.

MySQL

Widely used relational database for web applications.

MariaDB

Community-developed fork of MySQL with enhanced features.

Infrastructure

Docker Engine

Container runtime on native WSL2 Ubuntu 24.04 for reliable service isolation.

Self-hosted databases: PostgreSQL · MySQL · MariaDB · Redis. No cloud database dependency.

SaaS is convenient. Self-hosted is sovereign.

SaaS Risks

  • Your data lives on vendor servers. You trust their security posture.
  • Price hikes happen. Your costs scale with their pricing model, not your needs.
  • Vendor lock-in is real. Migrating out means rebuilding from scratch.
  • Surveillance capitalism: your usage data becomes their product.

Self-Hosted Advantages

  • Complete data sovereignty. Your servers, your rules, your jurisdiction.
  • UU PDP compliance ready. Data stays within Indonesian borders.
  • Fixed infrastructure costs. No per-seat surprises. No usage-based billing.
  • Full control over your automation destiny. Modify, extend, integrate freely.

Zero-Trust Workflow Audit

48 hours. Minimum 3 meaningful findings, or no cost.

What you get

  • Written audit report (PDF)
  • Effort estimation per finding
  • Concrete implementation roadmap

How it works

  1. Discovery call 30 menit: kami dengar pain point kamu.
  2. Bagikan workflow kamu (screenshot, SOP, atau walkthrough).
  3. Terima laporan dalam 48 jam: temuan konkret, bukan saran generik.

All shared materials are covered by NDA on request. Audit data is never used outside this engagement and is deleted upon completion.

Not ready for an audit yet? Just say hi →

Start your audit

Not ready for an audit yet? Just say hi →

Ready to own your automation?

No sales calls. No demos. Just honest technical discussion about your needs.

Want a 48-hour audit? See our flagship offer ↑

Your contact data is not shared, not entered into any third-party cloud CRM, and not used for any purpose other than project communication. You can request deletion at any time.

Or book a 30-minute discovery call:
Book a Discovery Call

The Self-Hosted Brief

Practical notes on running AI automation stacks without giving your data to the cloud. No fluff. Biweekly.