Your servers. Your network. The same maham+.
When your data has to stay inside your organization, maham+ runs on your own servers with the same features as our cloud service, including on networks with no internet connection.
What you get when you self-host.
Self-hosted maham+ is the product our cloud customers use, installed on your infrastructure and run by your team.
The same product
Every feature of the cloud service, from the ten-stage lifecycle and approvals to budgets, dashboards and reports.
A guided installer
A web installer checks the server, sets up the database, creates the first administrator, and configures and tests outgoing email.
No internet connection needed
maham+ runs on networks that are cut off from the internet, including its AI features when you connect them to a model server on the same network.
Your directory, your sign-in
Active Directory with scheduled sync, or single sign-on through Microsoft Entra ID or an OpenID Connect provider such as ADFS 2016 or later (ask us about yours). Entra ID needs internet access; on closed networks use Active Directory or ADFS. SCIM 2.0 provisioning is available (ask us to confirm your identity provider), a guided wizard moves people from Active Directory to single sign-on, and with single sign-on, people on company PCs can sign in with one click.
Your AI, on your network
Connect any OpenAI-compatible AI service your organization uses, including a model server on your own network. AI features stay off until you connect one, and every AI call is recorded in the audit log.
Encrypted backup and restore
An AES‑256 encrypted export of all your organization's data, plus an archive of your files. Compare a backup with what is there now before you restore; a restore either completes fully or changes nothing.
Your name and colors
The interface, emails and sign-in pages can carry your organization's name, logo and colors.
Arabic and English
Right-to-left native, with Arabic project templates and an Arabic user guide. Administrators can also edit the interface wording themselves.
Quoted per organization
Tell us about your environment and we will send you a quote for your organization.
Straightforward to run on your own servers.
A standard web stack, updates that come with written steps, and checks your administrators can run themselves.
Tested requirements
- A Linux server
- PHP 8 with the mysqli, openssl, mbstring, curl, fileinfo, gd and zip extensions (and ldap for Active Directory)
- MySQL 8
- Apache 2.4 with mod_rewrite
- A scheduler (cron) for background jobs such as email, scheduled reports and directory sync
We size the server with you.
Updates
Each update is delivered as a release package with written upgrade steps, so your team applies it on its own schedule.
Checks on a closed network
An administrator can see whether every database update has been applied, with the exact steps for any that are missing. Unexpected errors show a short reference that points to the matching line in your server log.