Built for places with separated networks, such as government and finance. From license issuance to installation it's all self-serve, and conversations, files and search all stay inside your company. Only when an admin turns Modak AI on does it go out, through a designated gateway (allowed IPs).
The installation blocks outbound connections on its own. Only what the admin turns on is opened.
| Item | Where |
|---|---|
| Conversations · Threads · Files · Search index · Audit logs · Users | Company servers (Postgres · MinIO) |
| Login email (6-digit code) | Company SMTP |
| Modak AI — Judgment for mentions, asking, translation, summaries, automation and data connections | Only when turned on, the question text goes through the gateway (allowed IP) · never used for training |
| Public and external data (laws, filings, actual transaction prices) | agent.store only if turned on |
| Phone notifications | Apple and Google notification servers (title and a short preview) only if turned on |
| Installed agents (Modak Cloud) · autopilot | Not available on-premises |
For Modak Cloud (modak.im), we list in a table where AI processing takes place, on the data processing in Korea page.
Turn on OIDC (Keycloak, Okta, Entra ID, Google Workspace) and SAML 2.0 (ADFS, etc.) in the server admin screen. A company-account button appears on the login screen, and you can even turn off email-code login and allow SSO only
One Docker host is the default, but if you have an internal Kubernetes cluster you can deploy with the Helm chart included in the installer. There are also settings to connect an external PostgreSQL and S3-compatible storage
No need to build new Mac, Windows, iPhone and Android apps. Enter your work email or address under "Connect to company server" on the login screen and the app remembers it, and notifications come from your company server too
₩4,900 per seat per month (VAT included) · minimum 10 seats. Every 12 months, 2 months aren't charged. The 30-day, 50-seat trial is issued instantly, no card needed
All you need is one server (Docker), one company domain, and your internal SMTP.
Start free and create a workspace. One admin is enough.
A 30-day, 50-seat license is issued instantly. For a full license, pay by card (seats × period) and it's issued immediately.
The license is a single JSON file, and the installer is one x86_64 or arm64 tar.gz. Once you agree to the terms, a download link valid for 1 hour opens.
The first run creates the .env; fill in the domain, admin email, and SMTP, then run it again and the DB, storage, server, and HTTPS come up in turn. Companies using Kubernetes deploy with the Helm chart included in the installer (same images, same license).
tar -xzf modak-onprem-*.tar.gz && cd modak-onprem-* ./install.sh # creates .env vi .env # MODAK_DOMAIN · SITE_ADMINS · SMTP_* ./install.sh # install · https://modak.your-company-domain
An admin logs in and pastes the license JSON into "Server admin," and it changes to "Valid." Even after it expires, conversations and files stay as they are; only Modak AI and new sign-ups stop.
Turn on "Modak AI outbound calls" and enter your gateway key, and the hosts and IPs to allow appear on screen. Open only those in your firewall. Turn it off and the server calls nothing outside.
Go to Server admin → "Login — company account (SSO)", enter your OIDC or SAML 2.0 values, test the connection, and save. A company account button appears on the login screen with no restart. The manual has tables for setting up Keycloak, Okta, Entra ID, Google, and ADFS.
Under modak.im Settings → On-premises, enter your company server address and email domain. Then on the app login screen, just entering your work email takes you to your company server.
Install the Mac, Windows, iPhone and Android apps just as they are now, and get in through "Connect to company server" on the login screen. If you've turned on SSO, it takes one click on the company-account button. Finding by work email only works when modak.im is reachable; where there's no internet, enter the server address directly. Once set, the app remembers it. On the web, go straight to your company address.
Use ./backup.sh to back up the DB and files, download the new version from modak.im, and run ./upgrade.sh /opt/modak in the new bundle folder. When a new version is out, a quiet banner appears on the admin screen (if enabled).
Linux x86_64 or arm64 · 4 cores · 8GB · 100GB+ disk recommended · Docker Engine 24+ · docker compose v2. If you have an internal Kubernetes cluster, you can also install with a Helm chart
Example: modak.corp.internal — point your internal DNS at the server. Add your company certificate if you have one; if not, one is issued automatically from an internal CA (distribute the root certificate).
Login is a 6-digit email code, no password. You only enter the host, port and account in .env
To use Modak AI, you need a key for an Anthropic-compatible gateway such as bizrouter. Admins can turn it on and off anytime
₩4,900 per seat per month (VAT included), with a minimum of 10 seats. Pricing is seats × period, and every 12 months, 2 months aren't charged. The 30-day, 50-seat trial is free. For tax invoices, bank transfer, multi-year contracts, or installation support, contact support@modak.im.
Yes. One installer contains all the images you need. If you don't turn on Modak AI, the server calls nothing outside. Licenses are also verified offline.
No. You keep using the Mac, Windows, iPhone, and Android apps that are already available, and you sign in to your company server from the login screen. The app remembers the server address.
After a 14-day grace period, Modak AI and new member sign-ups stop. You can still view and use existing conversations and files. To renew, go to modak.im Settings → On-premises and just paste in the new document.
Yes. Turn on OIDC (Keycloak, Okta, Entra ID, Google Workspace) or SAML 2.0 (ADFS, etc.) in server admin and a company-account button appears on the login screen. You can also turn off email-code login and allow SSO only.
Yes. Upload a Slack export ZIP and channels, threads and reactions are moved over. Original attachments must be downloaded from Slack's servers, so on a closed network an admin can briefly open slack.com domains in the allowed hosts, or migrate without attachments.
Start free at modak.im and get a 30-day trial under Settings → On-premises. No card, no sales calls.