/1tl 1TimeLink
Enterprise Security

Deploy 1TimeLink On-Premises

Keep sensitive passwords, credentials, and API keys entirely inside your own infrastructure. No third-party servers, no external API routing; just secure, client-side encrypted secret sharing native to your Slack workspace.

100% Data Sovereignty

All encrypted data remains within your databases. Ephemeral ciphertext is never routed through or stored on external cloud infrastructure.

Docker & K8s Ready

Distributed as a single container image. Easily spin up instances on AWS ECS, GCP Cloud Run, or your internal Kubernetes clusters.

Slack Audit Feeds

Direct webhooks securely feed audit alerts (link creations/views) into a private Slack channel under your absolute control.

Simple Container Architecture

Configure the container with standard environment variables. 1TimeLink stores only client-encrypted metadata and ciphertext.

# Run 1TimeLink On-Premises locally or in production
docker run -d -p 3000:3000 \
  -e SLACK_SIGNING_SECRET=your_slack_signing_secret \
  -e SLACK_BOT_TOKEN=xoxb-your-slack-bot-token \
  -e DATABASE_URL=postgresql://user:password@host:5432/dbname \
  -e ENCRYPTION_KEY=your_master_vault_key \
  1timelink/onprem:latest

Deploy in minutes. Ensure complete compliance.

Whether you require strict SOC 2 auditing, HIPAA alignment, or corporate network isolation, the self-hosted edition of 1TimeLink eliminates all security compliance bottlenecks.

Our sales team handles license key provisioning, customized Slack workspace integrations, and private container registry access.

Schedule a Demo

Book a brief 15-minute demonstration to walk through on-premises licensing, support SLA options, and setup.