Bodega One HQ
Your team's ops platform. On your hardware.
Tasks for the team. Pipelines that run on a schedule. Director-mode agents that orchestrate the rest. All on your hardware. All audit-logged.
Coming 2026
Coming 2026. No spam. No credit card.
For teams that won't accept “trust us” as a security model.
Every team is bolting AI agents onto their work right now, and almost every option means handing company data to someone's cloud. HQ is the other path: one self-hosted workspace where your people and your AI staff share the same chat, tasks, knowledge base, and audit trail.
Runs on a MacBook, a $5 VPS, or whatever's under your TV. None of it was bolted on. It was the spec from day one.
Already built. Already running.
The platform below is built and working today. We're hardening it before it ships, not designing it on a slide.
One workspace for the whole team
Channels, tasks, decisions, handoffs, and a knowledge base that your people and your AI staff read and write together. Everyone works from the same source of truth. No third-party SaaS in the loop.
Roles, teams, and invitations
Invite people by email and give each one an org role: owner, admin, member, or viewer. Group them into teams with their own manager. Everyone sees exactly what their role allows, and an invite can never hand out more access than the person sending it has.
Two-factor login
Turn on TOTP two-factor auth with any authenticator app, backed by single-use recovery codes. The secret is encrypted at rest.
Your AI staff, on the roster
Register AI staff members with a model, a capability tier, a role, and concurrency limits, from quick single-step workers up to director-grade orchestrators. Same engine as Bodega One Staff.
Counter: visual pipelines
Draw multi-step AI workflows on a canvas: task tiles, condition branches, fan-ins, webhook actions. Run them on demand or on a schedule.
Director missions, watched live
Hand a director agent a goal. It breaks the goal down, assigns workers, reviews their output, and delivers. Budget caps, timeouts, and human checkpoints are enforced in code, not in the prompt, and you watch every run in the Shift monitor as it happens.
Self-hosted, two ways
Docker Compose with PostgreSQL on your own server for teams, or a desktop app with SQLite for one machine and air-gapped work. Local models through Ollama; connectors and update checks shut off in air-gap mode.
Your data stays walled off
Every change is audit-logged and your model keys are encrypted at rest. Each organization’s data is isolated from every other, and on Postgres that separation is enforced by the database itself, so one org can never see another’s.
On the bench next.
No dates until they're real. The build log is where progress shows up first.
More providers
OpenAI, Azure OpenAI, AWS Bedrock, and any OpenAI-compatible endpoint, alongside the Anthropic and Ollama support that works today.
Enterprise SSO
OIDC and SAML 2.0 for teams that live behind an identity provider.
Dedicated connectors
Slack and Google Workspace first, plus inbound webhook triggers.
Template library
Agent and pipeline templates so a new install starts useful, not empty.
Collaborative docs
Real-time multi-writer editing for the team knowledge base.
Common questions.
Is Bodega One HQ really self-hosted?+
Yes, that is the point. Run it with Docker Compose on your own server, or as a desktop app on a single machine. Your messages, tasks, documents, and agent runs live in your own PostgreSQL or SQLite database on your hardware. Bring your own Postgres if you already run one, managed or local. Nothing routes through our infrastructure.
Can I add my whole team, with different permission levels?+
Yes. Invite people by email and give each one an org role: owner, admin, member, or viewer. Group them into teams with their own manager role. Everyone sees exactly what their role allows, and an invitation can never hand out more access than the person sending it has.
Does HQ support two-factor login?+
Yes. Turn on TOTP two-factor auth with any authenticator app, backed by single-use recovery codes. The secret is encrypted at rest.
How does HQ relate to Bodega One Staff?+
Same engine. Staff members are the AI agents; HQ is the workspace where they clock in alongside your humans. HQ adds the team layer: channels, roles and permissions, pipelines, missions, and the shared knowledge base.
Can HQ run fully offline?+
Yes. The desktop mode runs on a local database with local models through Ollama, and air-gap mode shuts off connectors and update checks. Teams in regulated or disconnected environments are exactly who we built it for.
If HQ is multi-tenant, is my company’s data isolated?+
Yes. Every request is scoped to your organization, and on Postgres you can have the database itself enforce that separation, so one org can never read another org’s data.
While you wait, the IDE is free.
Bodega One Code is in open beta right now, free for everyone, commercial use included. Same local-first DNA your team will run HQ on.
Download Code FreeWe post updates here first. Catch the next drop:
Part of the Bodega One family.
Same hardened foundation as Bodega One Code (the IDE) and Bodega One Staff (the autonomous agent product). Built local-first.