Prefect Logo

Prefect Customer Managed

Self-managed workflow orchestration for FedRAMP, HIPAA, and PCI environments

Run Prefect in your own environment

Get the orchestration engine that powers Prefect Cloud without sending any data outside your network. Deploy in your VPC, behind your firewall, or in air-gapped environments while keeping all the enterprise features.

If you need to meet FedRAMP, HIPAA, or PCI requirements, or if your data just can't leave your network, this self-managed version is what you want.

What you are actually getting

Workflows that recover automatically

When things break, Prefect doesn't just log an error and stop. It retries, caches results, and resumes from the last successful step so you can fix the actual problem instead of restarting from scratch.

Automatic retries

Configure backoff policies so transient failures don't kill your workflows

Resume from checkpoints

Workflows pick up from the last successful step instead of starting over

Reduce Infrastructure Costs

Optimize your compute resources and deliver on your business goals. Our customers are saving up to 73% in costs by switching to Prefect.

Scales with your workload

Prefect distributes work across whatever infrastructure you're running and adjusts as demand changes. You get the same performance whether you're running ten flows or ten thousand.

Works with your infrastructure

Deploy on Kubernetes, ECS, VMs, or bare metal without changing how Prefect works

Elastic scaling

Automatically adjusts to demand without capacity planning or manual tuning

Performance visibility

Built-in monitoring shows you where bottlenecks form before they cause problems

Built for compliance and security

Everything runs in your environment with the audit trails and access controls you need for FedRAMP, HIPAA, or PCI compliance reviews. Your data never crosses your network boundary.

Complete isolation

Code and data stay in your environment with private network connectivity

Enterprise SSO

Integrate with Okta, Azure AD, or ADFS for centralized access control

Audit logs

Export complete event history to your SIEM for compliance reporting

Predictable pricing

We charge by developer seat instead of metering API calls or task executions. Your costs stay flat as your workflows and automation grow.

Seat-based pricing

Pay for developers on your team, not the workflows they build or tasks they run

No usage limits

Run unlimited workflows and executions without hitting caps or overage charges

Consistent across deployments

Same licensing framework whether you use Cloud, Enterprise, or Customer Managed

Prefect, on your terms

Feature Comparison Matrix

FeatureOpen SourcePrefect Cloud (Self-Service)Prefect Cloud (Enterprise)Customer Managed Prefect
Where it runs
Your infrastructure
Prefect's SaaS
Prefect's SaaS
Your infrastructure (on-prem or private cloud)
Setup
Manual
Sign up and go
Onboarding included
Full deployment support
Orchestration
Core features
Fully managed
Fully managed with SLAs
Same engine, self-managed in your environment
Scaling
You handle it
Automatic
Automatic
Automatic in your infrastructure
Authentication
None
Email/password
SSO (Okta, Azure AD, ADFS)
SSO (Okta, Azure AD, ADFS)
RBAC
None
None
Yes
Yes
Audit logs
None
None
Yes, with SIEM export
Yes, with SIEM export
Data location
Your environment
Your environment*
Your environment*
Fully private
Private networking
N/A
Public internet
PrivateLink or VPC peering
Fully private
High availability
You configure it
Included
Included
You configure it
Support
Community
Community and email
Dedicated support with SLAs
Dedicated support with SLAs
Pricing
Free (Apache 2.0)
Monthly per seat
Annual per seat
Annual per seat
Best for
Individual developers
Small teams evaluating Prefect
Teams scaling across the org
Regulated or air-gapped environments