Your data on your own server
PolyOmi runs on ordinary web hosting that you control. Encryption, two-step login, a full audit log, safe updates and off-site backups are on from day one.
Sign-in and encryption
Locked down before you log in
Staff sign in at a secret address that nothing on the public site links to. The public front page shows only your logo and a short text, so visitors cannot tell what runs behind it.
Inside, names, e-mails, phone numbers, messages, notes and HR records are encrypted in the database. E-mail lookups use a keyed hash, never plain text.
- Two-step verification with any authenticator app, required by role if you want
- Repeated failed logins block the attacker's IP address
- A per-account brake stops distributed password guessing without locking out the real owner
- Updates, backups, restores and deleting users ask for your password again
Roles and permissions
Everyone sees exactly what they should
Built-in roles (Manager, Admin, Moderator, User and Client) plus any roles you create. A permission matrix covers every function in the system. Groups add extra permissions and decide which brands, projects and departments people can see.
- One matrix for every function, from tasks to payroll
- Groups limit access to specific brands, projects and departments
- Nobody can grant rights they do not hold themselves
Updates
One-click updates with a safety net
Upload a full or partial update package. PolyOmi checks it first, shows exactly what will change, and snapshots your files and database before it starts. If anything fails, it rolls back automatically, even if the new code cannot start.
- Package check before anything is touched
- A clear list of changed files and database changes
- Automatic rollback to the snapshot on failure
Backups
Backups that work on shared hosting
Complete backups of database, files and settings run in small steps, so they work on shared hosting and resume if they are interrupted. Set a daily or weekly schedule and retention rules, and restore from the panel or the command line.
Weekly off-site copies go to S3-compatible storage (AWS, Hetzner, Scaleway, Backblaze and more) or to FTP, FTPS or SFTP, with optional AES-256 encryption under your own passphrase.
In detail
Everything the platform takes care of
The administration you would otherwise solve with extra tools and scripts.
-
Guided installer
Checks the server, creates the database tables and sets up your manager account in minutes.
-
Hidden staff area
A secret sign-in address and a neutral public front page with just your logo and a short text.
-
Confirm it's you
Sensitive actions such as restores, key display and deleting users ask for the password again.
-
Full audit log
Every important action with user, time and IP address. Searchable and exportable to CSV.
-
Health and maintenance
System health checks, scheduled jobs via cron or web cron, maintenance mode and cache clearing.
-
Command-line tool
Run recovery tasks and restores from the command line when the panel is not an option.
-
Fully translatable
English and Danish included. Edit any text, add languages and import or export translations.
-
Your brand, your look
Logos, browser icon, accent colour, front-page texts per language and light, dark or system theme.
-
Cloud version coming Coming soon
Prefer not to run a server? PolyOmi Cloud, hosted in the EU, is on its way.
A closer look
Users, audit trail and languages, all from the IT area.
Users with roles, groups and two-step status
Audit log, searchable and exportable to CSV
Languages and translations you can edit
Platform FAQ
What hosting do I need?
Ordinary cPanel-style hosting with PHP and MariaDB or MySQL. No special server software is required.
Who can see my data?
Your data lives in your own database on your own hosting. Personal data and free text are encrypted in the database, and every important action is written to the audit log.
What happens if an update fails?
PolyOmi snapshots files and database before it installs anything. If the update fails, it rolls back automatically, even if the new code cannot start.
Where do off-site backups go?
To any S3-compatible storage such as AWS, Hetzner, Scaleway or Backblaze, or to an FTP, FTPS or SFTP server. You can encrypt them with AES-256 and your own passphrase.
Is PolyOmi GDPR compliant?
PolyOmi is built with GDPR in mind: personal data is encrypted, you keep it on your own server, and access is controlled by roles and logged. How you use it is still your responsibility. See security.
Run it on your own terms
PolyOmi is in closed beta. Join the waiting list to install it on your own hosting when a spot opens.