On-premise licensing
Deploy the Centricall platform inside your own cloud account, VPC or data centre. Every call recording, transcript and customer record stays in your environment — no multi-tenant SaaS holding your call data, no per-minute platform meter, and no vendor who can change the terms underneath you.
Deployed against providers you already trust
The problem
Multi-tenant voice AI is the right answer for a lot of teams. It stops being the right answer the moment your call recordings are regulated, your volume is serious, or your phone line is the thing the business runs on.
Risk one
Recordings, transcripts, caller names, card references and health details sit in a shared platform alongside every other tenant. Security reviews rarely fail on encryption — they fail on where the data physically lives and who else can reach it.
Risk two
Per-minute and per-seat pricing charges you more precisely as the phone system works better. At real call volume the platform fee stops being a tool cost and starts behaving like a tax on growth.
Risk three
Rate changes at renewal, a shifting roadmap, a new sub-processor added by email, a policy update that reclassifies your use case. When the phone line is the business, that exposure is not a procurement detail.
All three have the same root cause, and the same fix: move the platform inside your own perimeter.
The basics
An on-premise AI voice agent license is a one-time license to deploy and operate a voice AI platform inside your own server or cloud account, so every call recording, transcript and customer record stays within your infrastructure instead of a vendor's multi-tenant SaaS. On-premise, self-hosted and private-cloud all describe the same arrangement: the platform runs in an account you own, under the security controls you have already had audited. Telephony and model providers connect through your own accounts and bill you directly, so you can name every party in your data-flow diagram — and none of them is a shared platform holding your recordings.
In short
What you get
Not a cut-down on-premise edition with the good features held back for the cloud tier. This is the production platform answering live calls today, running in your account instead of ours.
The same build answering live calls today — voice agents, admin console, dashboards and integrations. Deployed into your environment, not a trimmed-down on-prem edition with features held back.
Your AWS, Azure, GCP or private VPC — or your own hardware. Our engineers deploy it with your team, or hand over a packaged deployment your infrastructure people run themselves.
Call records, recordings, transcripts, summaries and configuration are written to storage you own, under keys you hold, in the region you are required to keep them in.
Number provisioning, porting, inbound answering and outbound dialling run through carrier accounts in your name. You keep the numbers and the carrier relationship.
The speech-to-text, reasoning and text-to-speech pipeline tuned for interruption handling and natural turn-taking — not the walkie-talkie pauses that make callers hang up.
Google Calendar, Outlook and Calendly booking; HubSpot and Salesforce sync; webhooks and a documented REST API so the agent reaches the systems you already run, from inside your own network.
Separate numbers, greetings, routing rules, hours and agent behaviour per site or team, all inside the single deployment — with no per-seat or per-tenant charge for adding another.
Wire the console into your SSO and directory, restrict it behind your VPN or IP allow-lists, and scope roles so each team reaches only the call data it should.
An architecture and runbook walkthrough with the engineers who built the platform, so your team can operate, monitor and upgrade it rather than file a ticket and wait.
What your team gets to use
Architecture
“Self-hosted” only means something once every component is named and located. Here is the whole map — the version your security reviewer will ask for, published before they have to.
Component
Where it lives
Read the bottom two rows together: usage runs through providers you contract with directly, at their rates, with no margin taken by us — and after handover we hold no standing access to your production environment at all.
Compliance and security
Every voice AI vendor encrypts in transit and at rest. What stalls a security review is the part nobody can encrypt away: which organisation holds the recording, in which country, and who else can reach it. Self-hosting answers all three by removing the question.
Deploy in the region you are required to keep data in
Because you choose the account and the region, residency stops being a vendor promise in a trust centre and becomes a line in your own infrastructure inventory that an auditor can verify directly.
Protected health information stays inside your controls
Call audio and transcripts containing PHI are stored in the environment your existing safeguards, BAAs and access reviews already cover, instead of being handed to another downstream processor to account for.
Subject requests become queries you run yourself
Export and deletion run against your own database on your own timeline. No vendor ticket, no waiting on a third party to confirm a record is gone, no unclear split of controller and processor duties.
Configured per jurisdiction, enforced in your stack
Two-party consent notices, recording toggles, redaction and retention windows are set to what your regulator and your legal team require, and applied by jobs running inside your environment.
SSO, VPN, allow-lists, KMS, monitoring
The platform sits behind the controls you have already had audited rather than adding a new externally-hosted surface that has to be reviewed, penetration-tested and re-approved on its own.
You choose every vendor in the path
Telephony and model providers are your accounts, contracted by you. Nothing new appears in your data-flow diagram because a platform changed suppliers between renewals.
A note on honesty
On-premise deployment does not make an organisation compliant on its own — nothing a vendor sells does that. What it does is move the controls that matter inside a perimeter your team already governs and already evidences, which is usually the difference between a review that passes and one that never finishes.
The economics
Per-minute pricing has an awkward property: the better your voice agent performs, the more the platform charges you for it. An on-premise license breaks that link.
Per-minute SaaS pricing rises every time the agent answers another call. An on-premise license fixes the platform line permanently, so only genuine usage — carrier minutes and model inference, billed to you at provider rates — moves with volume.
Adding a department, a clinic, a branch or a second language is a configuration change inside a deployment you already run. There is no tenant fee, no seat count to negotiate and no upgrade tier gating the feature you need.
What we scope on the call is your environment, call volume, integrations and how much of the deployment you would like us to drive. You get one figure for that scope, and it does not change because your call volume grew.
We would rather size this against your real call volumes on a call than publish a number that is wrong for almost everyone who reads it. If a hosted plan is genuinely the better economics for you, we will say so.
Get a deployment quoteWho deploys it this way
Two things drive the decision, and most buyers have both: call content that is regulated, and call volume that makes a per-minute platform fee indefensible.
Appointment calls carry PHI in the first ten seconds. Keeping recordings and transcripts inside the environment your BAAs and safeguards already cover removes the hardest question in the review.
Intake calls are privileged the moment they connect. Privilege and client-confidentiality duties are far easier to defend when no third-party platform ever held the recording.
Card references, account details and advice given on a recorded line sit inside PCI and regulatory scope. On-premise keeps that traffic within the perimeter you already certify.
Procurement frequently mandates in-country residency and forbids shared-tenancy processing outright. A deployment in your own approved environment answers both requirements.
Once minutes run into the tens of thousands a month, a per-minute platform fee is the single largest controllable cost in the stack — and the only one a fixed license removes entirely.
Dozens of sites, each with its own number, hours and routing, on one deployment — without a per-tenant or per-seat charge multiplying across the estate.
Signs on-premise is the right shape for you
And it is not for you if
You want to be live this week with nobody owning infrastructure. On-premise means your team accepts responsibility for an environment. If that is not a trade you want to make, our hosted plans are the better answer, and we will tell you so on the call.
Deployment path
Five steps, and the first one is us checking whether you should do this at all.
A short call on your call volumes, target environment, integrations and compliance obligations. If a hosted deployment would genuinely serve you better, we will say so on this call rather than after a contract.
We map the deployment against your infrastructure and security requirements — region, network topology, identity, key management, retention — and produce something your reviewers can actually sign off.
One licensing agreement and one quote for the scope agreed. No per-minute platform metering, no seat count, and no clause that reprices you as your call volume grows.
Our engineers deploy into your environment with your team, or hand over a packaged deployment your infrastructure people run themselves. Integrations, numbers and agent behaviour are configured against your live workflows.
A validation pass on real calls, a walkthrough for the people who will operate it, and an ongoing support and update term with a named route to our engineers.
License scope
Stated plainly up front, because it is the fastest way to find out whether this is the right license for you or whether you want the other one.
Included
Not included
That is a different license. The white-label license hands over the complete source code and the right to rebrand the platform and sell it to your own clients under your own name — built for agencies, MSPs, telecom resellers and BPOs rather than for internal deployment.
Which one you want
The same platform under three arrangements. The difference is who holds the data, how the cost behaves, and whether you are running it for yourself or selling it on.
| Hosted plans | On-premise license | White-label license | |
|---|---|---|---|
| Where it runs | Our multi-tenant cloud | Your cloud account, VPC or hardware | Your infrastructure |
| Who holds the call data | We do, on your behalf | You do, exclusively | You do, exclusively |
| Platform cost shape | Monthly plan plus per-minute overage | One-time license, no per-minute platform fee | One-time license, no revenue share |
| Source code | Not included | Not included | Included in full |
| Resale to third parties | Not permitted | Not permitted | Permitted and expected |
| Runs under your brand | Agent behaviour only | Internal deployment, your identity stack | Every client-facing touchpoint |
| Built for | Teams that want it live this week | Regulated, high-volume and data-sensitive operations | Agencies, MSPs and resellers selling it on |
Straight answers
These are the ones that decide whether the deployment still looks like a good decision two years from now.
Nothing from your call traffic. The platform runs in your environment and there is no telemetry pulling recordings, transcripts or caller records back to us. During the support term you decide what you share when you raise something — a log excerpt, a redacted transcript, a screen share — and that is the only path by which we see anything at all.
Your deployment keeps running. There is no licence server to phone home to and no remote kill switch, so ending the term stops updates and engineering support rather than the platform. You can restart it later, and we would rather you leave and come back than stay because leaving was made painful.
You need someone who owns your cloud account. Beyond that, no — our engineers can carry out the deployment and hand you a running platform with a runbook, and day-to-day work after that is configuration rather than engineering. Teams with their own infrastructure people usually prefer to drive the deployment themselves, and that option stays open.
FAQ
If your security or infrastructure team has a question that is not here, bring it to the call. We would rather rule out a bad fit early than deploy one.
Ask us directlyAn on-premise AI voice agent license is a one-time license to deploy and operate a voice AI platform inside your own server or cloud account, so every call recording, transcript and customer record stays within your infrastructure instead of a vendor's multi-tenant SaaS. In practice it means the voice agent answering your phone runs on infrastructure you control, and no third-party platform ever holds the recording of a customer call.
Yes — on-premise, self-hosted and private-cloud describe the same arrangement here, and buyers use the terms interchangeably. What matters is the tenancy: the platform runs in an account you own, whether that is your own hardware, a dedicated VPC in AWS, Azure or GCP, or a data centre you already operate. We deploy into whichever of those your security team has already approved.
No. Once deployed, the application, database, object storage, recordings, transcripts and user records all live inside your environment. There is nothing sending call data back to us, and we hold no standing production access. Anything you choose to share while raising a support issue is shared deliberately by you, and nothing moves without that.
No. This license covers deploying and operating the platform inside your own infrastructure for your own business; it does not include source code, and it does not include the right to resell, sublicense or host the platform for anyone else. If holding the code and selling the platform on to your own clients is what you are after, that is our white-label license instead.
The on-premise license is for running the platform for your own organisation: your calls, your data, your locations, no resale. The white-label license is for selling it — it includes the full source code and the right to rebrand the platform and operate client accounts under your own name. Same platform, different rights, different buyer.
Yes, and there is no per-seat, per-location or per-tenant charge for doing so. Each site or team gets its own numbers, greeting, business hours, routing rules and agent configuration inside the deployment you already run. The only thing that grows as you add locations is infrastructure and usage, billed to you at provider rates.
Substantially, because it removes the questions those reviews usually fail on. Security assessments rarely stall over encryption — they stall over where data physically lives and who else can reach it. Running the platform inside your own environment puts call recordings and transcripts under the controls, safeguards and agreements you have already had audited, and makes GDPR export and erasure requests queries you run yourself rather than tickets you file with a vendor.
A cloud account or server environment you control, plus provider accounts for telephony and for speech and language models. The exact sizing depends on concurrent call volume, and we work it out with your team during the architecture review before anything is committed, so there are no surprises on your first infrastructure invoice.
Most deployments go live within days of the agreement and infrastructure access being in place. Where it takes longer, the reason is almost always on the approval side — a security review, a network change or a carrier porting window — rather than the deployment itself, and we will flag which of those apply to you on the fit-check call.
It is a one-time license, quoted once against your deployment scope, with no per-minute platform fee and no per-seat or per-location charge. What varies between deployments is the environment, the integration work and how much of the deployment you would like us to drive — so we quote it accurately for your situation rather than publish a figure that would be wrong for almost everyone reading it. Telephony and model usage are billed to you directly by those providers at their rates, with no margin taken by us.
The difference is structural rather than a discount. Per-minute platform pricing rises every time the agent answers another call, so the better the system works the more the platform costs. An on-premise license fixes the platform line permanently and leaves only genuine usage — carrier minutes and model inference — variable. That is why the case is strongest for high-volume operations and weakest for low, occasional volumes, where our hosted plans are the honest recommendation.
Yes, and being inside your own network makes it easier rather than harder. There are documented REST APIs and webhooks, plus HubSpot, Salesforce, Google Calendar, Outlook and Calendly integrations out of the box. Because the platform sits inside your perimeter, it can reach internal databases, practice-management systems and line-of-business tools that you would never expose to an external SaaS vendor.
Updates and engineering support are covered by an ongoing term agreed at deployment, so platform improvements — model, voice and telephony changes included — reach your instance on a schedule you control rather than being pushed at you mid-shift. You choose when to apply them, and if you end the term your instance keeps running exactly as deployed.
Your deployment is unaffected, which is much of the point. The platform runs on your infrastructure under a license already granted, so there is no account for anyone to reprice, throttle or switch off. Your only exposure to us is the optional support and update term, and ending it leaves the platform running.
We cover your call volumes, the environment you want to deploy into, your compliance obligations and which integrations matter, then walk you through the platform and the architecture so your technical people can interrogate it properly. If on-premise is the wrong shape for you, we will tell you on that call. There is no obligation at any stage.
It follows from one question: who is allowed to hold the call recording. If a shared multi-tenant platform holding customer audio is acceptable to your reviewers, SaaS is simplest. If it is not, a private tenant narrows the blast radius but the vendor still holds the data. Self-hosted is the only model where recordings, transcripts and caller PII never leave infrastructure you control, which is why regulated buyers usually end up there regardless of where they started.
Role-based access control, single sign-on, audit logging of who accessed which recording, configurable retention and deletion, data residency you can evidence, and an integration model that does not require broad standing credentials into your core systems. Ask how each is evidenced to an auditor rather than whether it exists.
Because you choose the cloud account, region and data centre, residency stops being a vendor promise and becomes a line in your own infrastructure inventory. For organisations operating across regions, separate deployments can be run per region so data never crosses a boundary it should not.
We do not publish compliance certifications as marketing claims, and we would encourage the same scepticism toward any vendor that does without showing you the report and its scope. What an on-premise deployment does is remove us from the data path entirely: the controls, the residency and the retention become yours, inside an environment your auditors already assess.
Ask where audio is processed and stored, which sub-processors touch it, how long it is retained by default, who inside the vendor can access a recording, how access is logged, what happens to your data if you leave, and whether any model provider retains prompts or audio for training. The answers to those seven questions separate platforms far more reliably than a certification badge.
Concurrency is provisioned against your measured peak rather than an average, and because the deployment runs on your infrastructure you control the headroom rather than sharing a pool with other tenants. Size it from your busiest hour, not your monthly total, because the busiest hour is what fails.
Yes, and that is precisely what this license is. The platform is deployed inside your own cloud account, VPC or data centre, answering your phone lines, with no per-minute platform fee and no call data leaving your environment.
Bring your infrastructure and compliance people. We’ll walk through the platform, the architecture and what running it in your environment actually involves. No pressure, no commitment.
Tell us a bit about your systems and goals.
We’ll follow up with the next steps.