A private TAK server, in the region you choose
Where the data lives is a policy decision you can make in an afternoon. Keeping a certificate authority alive for three years is a staffing decision. A private server stops those being the same conversation.
Your region
Name the provider and the region. Your data stays in the jurisdiction your policy requires.
Your instance
Dedicated, not a slice. Your own database and your own certificate authority, shared with nobody.
Our operations
Scaling, patching, certificates and uptime stay with us. Choosing where it runs does not hand you the pager.
Some requirements are about where the data lives rather than what the software does. A private server answers those without asking you to become a hosting company.
What a private server is
A dedicated, single-tenant ArgusTAK instance, deployed into the cloud provider and region you name, and operated by us. Your own database, your own certificate authority, your own hostname. Nothing shared with another customer, which is usually the real question behind a request for ‘our own server’.
Everything on the platform page applies unchanged: automated certificates, federation, missions, streaming video, and the standard ATAK, iTAK and WinTAK clients from tak.gov. It is the same product, in a place you picked.
When the location is the requirement
Most teams do not need this, and we will say so. The shared service is cheaper, identical in function, and running already. But a class of requirement cannot be satisfied by any amount of reassurance about the shared service, because it is not about the software at all:
- Data residency — the data must remain in a named country or economic area
- Sovereignty or accreditation rules that name an approved provider or region
- A government cloud your organization is already required to use
- A contractual obligation to a customer of yours that flows down to your suppliers
- Isolation from other tenants as a stated condition rather than a preference
What it is not
It is not air-gapped, and we would rather lose the enquiry than blur that. We operate the instance, which means a management path exists. Any vendor who offers to run your server for you and calls the result air-gapped is selling you one or the other, and it is worth asking them which.
It is also not a deployment on your own hardware. We previously offered that and no longer do. If your policy genuinely requires equipment in a building you control, say so on the contact page and we will tell you plainly that this is not that — which is more use to you than a proposal that quietly is not either.
What stays ours
The operations, and that is the point rather than a caveat. Scaling, updates, patching, certificate issuance and rotation, backups, restore testing and uptime remain our responsibility on a private server exactly as they do on the shared service.
This is the trade that makes the offering worth having. Where the data lives and who keeps the server alive get conflated constantly, and a private server separates them: you take the jurisdiction, we keep the certificate authority.
Private and branded together
A private server and the white box are the same mechanism seen from two directions, so they combine. A reseller can put a dedicated instance in a region their customer requires, under their own name and hostname, with their own support address on it.
For an agency, the same combination produces a console that reads as an internal system and runs in the jurisdiction policy names — two arguments that usually have to be won separately.
How a deployment gets scoped
Tell us the shape of it: which provider and region, roughly how many users and devices, what the compliance regime is and who signs off on it, and what support you expect. That conversation is about operations and obligations more than about software, because the software part is settled.
Private servers sit in the Enterprise tier and are quoted per deployment. Start on the contact page. If the shared service would serve you better, that is what we will tell you — a private server you did not need is a cost you carry every month for a requirement nobody actually has.
Common questions
Where does a private server run?
In the cloud provider and region you name — AWS, Azure or Google Cloud, including their government regions. If your requirement is that data stays in a particular country or jurisdiction, that is the requirement we build the deployment around.
Is it dedicated, or a slice of the shared service?
Dedicated. Your own instance, your own database, your own certificate authority. Nothing is shared with another customer, which is usually the actual question behind ‘can we have our own server’.
Who operates it?
We do. Scaling, updates, patching, certificate issuance and rotation, backups and uptime stay with us, exactly as they do on the shared service. Choosing where it runs does not hand you the pager.
Is it air-gapped?
No, and it is worth being blunt about that. We operate it, so a management path exists. A vendor who offers to run your server for you and calls it air-gapped is selling you one or the other. What a private server does give you is a known jurisdiction, a dedicated instance and network rules written around your requirements.
Can we run it on our own hardware?
Not any more. We host it, in the provider and region you choose. If your policy genuinely requires hardware in a building you control, tell us on the contact page and we will say so honestly rather than sell you something adjacent.
Can it carry our own branding?
Yes. A private server and the white box are the same mechanism, so a reseller or an agency can have a dedicated instance in a chosen region under their own name.
How is it priced?
Per deployment, because region, scale and support expectations vary enough that a list price would be fiction. It sits in the Enterprise tier.
The server was the only thing in the way
Five devices, free, with no card and no clock. Put your team on one map for a weekend and find out properly.