Fully Managed Ente
as a Service

Deploy Ente as a fully managed service starting at €9/mo. Get automated backups, SSL, updates, support and monitoring included.

Ente is an open-source, end-to-end encrypted platform built around two apps on one server: Ente Photos backs up and organizes your library, and Ente Auth keeps your two-factor codes. It pairs the convenience of Google Photos or iCloud with encryption only you can open, and a server you control, in the region you choose.

✓Free 7-day trial  ✓99.9% Uptime SLA  ✓No credit card  ✓Cancel anytime

✓Free 7-day trial  ✓99.9% Uptime SLA
✓No credit card  ✓Cancel anytime

Ente

Ente

STARTING AT

€9/month
Automated Backups
Monitoring
Automated Updates
Auto SSL

USAGE

Unlimited
Human Support
Custom Domains
Terminal Access
File Manager Access
Deploy in your region — 21 locations worldwide
GermanyFinlandNetherlandsUKSwedenUnited StatesCanadaSingaporeJapanAustraliaBrazilSouth Africa+9 more →
Ente Preview Image

ABOUT THE SOFTWARE

What is Ente

Ente is an open-source, end-to-end encrypted platform for photos and two-factor codes. One server runs two apps: Ente Photos, a private alternative to Google Photos, and Ente Auth, a two-factor manager. Encryption happens on your device, so the server only ever stores data it cannot read.

Ente is published under the AGPL-3.0 license by Ente Technologies, a company founded in 2020 and run by a team of around sixty. The code is fully open and has been audited by independent firms including Cure53, with a 2025 review sponsored by CERN. The repository carries more than 29,000 stars on GitHub.

The self-hosted server is called Museum. It runs as a single Go service backed by PostgreSQL for metadata and S3-compatible object storage for the encrypted files. The same server powers both Ente Photos and Ente Auth, so one account covers your library and your two-factor codes. In March 2026, Ente reported half a billion photos and files preserved on the platform.

FEATURES

What Ente does

Ente is two apps on one encrypted account. Ente Photos backs up, organizes, and shares your pictures and videos; Ente Auth stores and syncs your two-factor codes across devices. Both encrypt on your device, work offline, and run from the same server you control.

End-to-end encryption

Every photo, video, and two-factor secret is encrypted on your device with keys derived from your password. The server stores only data it cannot read.

Automatic photo backup

Mobile apps for iOS and Android back up your camera roll in the background, preserving timestamps, location, and album structure.

Ente Auth two-factor manager

Store time-based two-factor codes, sync them across phones and desktop, and recover them with a 24-word key. No screenshots, no lock-in to one phone.

Shared albums and links

Share albums with other Ente users or through end-to-end encrypted public links, with optional passwords and expiry dates.

On-device face and content search

Machine learning groups photos by person and lets you search by content on your device, without sending your library anywhere.

Cross-platform apps

Native apps for iOS, Android, macOS, Windows, Linux, and the web, plus a command-line tool for bulk import and export.

Family sharing

Share one storage pool across several people, each with their own encrypted account and their own private library.

Plaintext export

Export your entire library to plain files on disk at any time, so your photos are never trapped in one service.

WHAT'S ALWAYS INCLUDED

Every app. Fully managed.
Nothing extra to pay for.

Every app on DANIAN ships with the same operational baseline. You do not choose a backup add-on or a monitoring tier. Hosting, patching, backups, SSL, and support are part of the €9, and they apply to Ente the same way they apply to everything else in the catalog.

Automatic updates and patches

Apps run the latest stable version. Security patches applied silently, with rollback if needed.

Daily off-site backups

Multiple daily backups in redundant off-site locations. One-click restore if anything goes wrong.

24/7 uptime monitoring

Continuous monitoring with instant alerting. We respond before you notice.

SSL, firewall, DDoS protection

Auto-renewing SSL, hardened firewall rules, DDoS mitigation on every deployment.

Performance and scaling

We monitor resource usage continuously. When your app needs more headroom, we flag it and upgrade with your explicit approval.

Dedicated engineering support

Real engineers by email and ticket. DNS, SMTP & migration help. All included in €9.

WHY MANAGED

Why teams pick managed Ente

In February 2025, a government order pushed Apple to drop end-to-end encryption for new UK iCloud accounts, and Google raised its storage prices the same month. Teams that want encryption no one can switch off increasingly run their own Ente, and most would rather not run the server themselves.

Ente is genuinely open-source, which means you can run it yourself. Doing so well is the hard part. Museum has to reach your object storage at the same address your apps do, the storage bucket needs the right cross-origin rules (newer builds send a Content-MD5 header that a default bucket will reject), and verification emails need a working mail relay. None of that is in the marketing.

The failure mode that catches people is backups. Your photos live as encrypted files in object storage, but the keys that decrypt them live in the PostgreSQL database. Lose the database and the files are unreadable, even though every byte is intact. We back up the database and the files together, every day, off-site, so a restore actually restores.

We pin the Ente release we run and test updates before they reach you. We open the exact cross-origin rules Ente needs, wire the mail relay so account emails arrive, and connect the official Ente apps to your server without you hunting for the hidden endpoint setting. Your instance runs in the region you pick, and you can export a plaintext copy of everything whenever you want. You hold the encryption keys throughout; we never see your photos.

A pinned, tested Ente server, patched on a schedule that does not interrupt uploads.

The cross-origin rules current Ente builds need, so uploads work the first time.

A working mail relay, so verification and invite emails actually arrive.

The official apps pre-pointed at your server, with no hidden endpoint step.

Daily off-site backups of the database and the encrypted files, together.

REVIEWS

Hear from customers ​like you​​​​​​​

Successful businesses and professionals around the world rely on DANIAN every day

USE CASES

Three teams who run Ente on DANIAN

Ente earns its place wherever a team wants encryption it controls. These are three composite teams, drawn from the kinds of customers who move to managed open-source, and the choices we make when we set them up.

12-PERSON CONSULTANCY

Replacing per-seat 2FA with a private Ente Auth instance

A boutique advisory firm moved its team off a per-seat authenticator. We run their Ente Auth in a region near their office, sync codes across phones and laptops, and store everything encrypted. Storage is tiny, so €9 covers the whole team. Recovery uses a 24-word key the firm holds, not us.

6-PERSON ARCHITECTURE STUDIO

Keeping site-documentation photos off the public cloud

A small practice documents every project before walls close. We host their Ente in the region closest to their studio, turn on encrypted shared-album links so clients can view progress, and back up the database alongside the photos every night. They export a plaintext copy to their own archive each quarter.

INVESTIGATIVE NEWSROOM

Sensitive imagery that only the team can open

A small newsroom keeps source material in an Ente instance no provider can read. We pick the region for them, wire the mail relay so account invites work, and leave replication off unless they ask. The encryption keys never leave their devices, and they pull a plaintext export to cold storage on a schedule.

COMPARISON

Four ways to run Ente

There are four honest ways to keep your photos and two-factor codes private. The trade-off is not really price; commodity storage costs about the same everywhere. It is who can read your data and who runs the server. Here is how the paths compare.

PathMonthly costWho can read your photosOngoing work for youGet your data outBest for
Stay on Google Photos or iCloud$9.99 for 2 TBThe provider can; photos may feed AI featuresNoneExport tools, with limitsPeople who accept the provider reading their library
Self-host Ente on a VPS~$24 server + ~$7/TB storage + your timeOnly you, you hold the keysPatching, cross-origin rules, backups, mail relay (2–5 hrs/mo)Full export anytimeDevelopers who want control and have the hours
Run Ente on a home server€210–667 effective: hardware, power, business line, timeOnly youAll of it, plus uptime and on-callFull export anytimeHobbyists who enjoy running the box
DANIAN managed EnteFrom €9/month managed instance; storage scales with your libraryOnly you; we never see your photosNone; we run the serverPlaintext export on demandTeams who want their own encrypted Ente without running it

A managed Ente instance starts at €9/month with 30 GB included, which is plenty for Ente Auth and a working photo set. Large libraries need more storage; tell us how big yours is and we will size it with you. We will not upgrade your resources or charge you without your explicit consent.

BY INDUSTRY

Ente for specific industries

Some fields treat a photograph as a working record, not a memory. Their demands on storage are specific: file sizes, retention, who may open an image, and how it is proven untouched. Here is how a managed Ente instance fits five of them.

Photographers work non-destructively: 14-bit RAW files captured in formats like Canon CR3, ingested into a color-managed catalog, culled, and archived as the legal master. A single 45-megapixel RAW runs about 45 MB, so an eight-hour wedding of roughly 3,000 frames is near 135 GB before culling, with delivered galleries of 400 to 800 edited images. On a managed Ente instance we size object storage to the studio's real volume, enable encrypted shared-album links for client delivery, and keep the database backed up beside the files so a restore returns the full set. The originals stay end-to-end encrypted, useful when a gallery includes clients who never agreed to live on a public cloud, and a plaintext export drops the RAW masters back to the studio's own archive on demand.


Commercial construction runs on concealed-conditions documentation: rebar, rough-ins, and waterproofing are photographed before concrete pours and walls close, organized by phase, because roughly 70 percent of disputes trace back to thin records. A commercial site generates 30 to 50 photos a day, with weekly professional shoots standard on projects over two million. We host the firm's Ente in the region nearest the office, turn on encrypted shared-album links so a client or lender can see progress without a public-cloud account, and back up the file-key database nightly alongside the images. Phase folders stay private and end-to-end encrypted, the timeline is preserved with original timestamps and location data, and the firm keeps a plaintext export in its own document system as the record.


Source protection is the discipline here: sensitive images arrive over channels like SecureDrop, are stripped of metadata, and are never held on internet-exposed laptops. 2024 was the deadliest year on record for journalists, with 124 killed, which is why where an image rests, and who can open it, matters. On a managed Ente instance the encryption keys never leave the team's devices, so no provider, including us, can read the archive. We choose the region deliberately, wire the mail relay so account invites reach staff, and leave cross-region replication off unless the newsroom asks for it. A 24-word recovery key stays with the editor, and the team pulls a plaintext export to offline cold storage on a schedule, keeping a copy beyond any single server.


Photographic evidence lives or dies on chain of custody: a documented, chronological record of every access and transfer from capture to courtroom, with standards like ISO/IEC 27037 describing how digital evidence is preserved so it stays admissible. Digital evidence now factors into roughly 90 percent of criminal cases, and a gap in handling is a standard route to getting an image excluded. On a managed Ente instance, case photos stay end-to-end encrypted with keys only the firm holds, so the file is one no provider can quietly read. We keep the file-key database backed up beside the encrypted images nightly, size storage to the matter load, and leave the originals untouched while the firm works from copies. A plaintext export with original timestamps preserves the master set in the firm's own records.


Digitization follows guidelines like FADGI, whose four-star scale defines preservation-grade capture: an uncompressed TIFF master at 600 ppi and 6,000 pixels on the long edge, with embedded metadata and an accession number, plus a JPEG access copy for the public catalog. A single preservation TIFF at that spec commonly runs 100 to 300 MB, so a collection of any size adds up quickly. On a managed Ente instance we size object storage to the digitization plan, keep the file-key database backed up beside the masters every night, and the institution chooses the region its data rests in. Masters stay end-to-end encrypted until the institution decides what to publish, original capture metadata is preserved, and a plaintext export returns the TIFF masters to the institution's preservation system as the system of record.


FAQ

Frequently asked questions

Three groups of questions: how Ente works on a server we run, how to move your photos in and connect your apps, and how billing and support work. The encryption answers apply whether you self-host or run with us. Ente encrypts on your device either way.

01

Technical and configuration

Yes. We point the official iOS, Android, desktop, and web apps at your server during setup, so you skip the hidden step where you would normally tap an onboarding screen seven times to reveal the endpoint field. You sign in with your Ente account and your devices sync as usual.
Yes. Encryption happens on your device using the same open-source libraries, whether the server is Ente's or ours. Your password derives the keys; the server only ever stores data it cannot read. Running with us changes who operates the server, not the cryptography.
We run your Ente on S3-compatible object storage in the region you choose, and your application data stays there. We do not turn on cross-region replication unless you ask for it. If you later want a second region for redundancy, we set it up with your consent.
Yes, this is one we set for you. Newer Ente builds send a Content-MD5 header on uploads, and a default storage bucket rejects it, which breaks uploads. We open exactly the cross-origin rules current builds need and re-check them when Ente changes.
Your photos are encrypted files in object storage, but the keys that decrypt them live in the database. We back up both, together, off-site every day, so a restore returns readable photos, not orphaned files. Losing the database alone is the failure that traps self-hosters; we design around it.
We pin the Ente release we run rather than tracking the main branch blindly. We test each update on our own instances before it reaches yours, and we apply server and security patches on a schedule that does not interrupt uploads.
You get the file-manager and terminal access included on every plan for working with your app's files. We keep the parts that guarantee uptime, patching, and backups under our operation. That boundary is what lets us promise the service in the first place.
Yes, we wire a working mail relay so Ente's verification and invite emails actually arrive. On a do-it-yourself install this is a common gap: without a configured relay, new accounts never receive their confirmation and sign-up quietly stalls.
Yes. Ente's face grouping and content search run on your device, not on the server, so they work the same on a managed instance. Your library is indexed locally and never sent anywhere to be searched.

02

Migration and onboarding

21 datacenter locations across six continents. You choose the region at provisioning. Application data sits in the region you choose; pick whichever is closest to your users or matches your data-residency preference.
Yes. Request a region migration from the dashboard and we run the move in the background. The system emails you when the migration completes; total transfer time depends on data volume but typical instances finish in a few hours. There is no extra charge for a region change.
Yes. Full data export is available at any time, in a portable format you can bring to any infrastructure.
Yes. Order a Google Takeout export in ZIP format with Google Photos selected, then point Ente's desktop app at the folder of ZIP files. Ente reads Google's metadata sidecars and preserves timestamps, location, captions, and albums as encrypted data. We help you through it.
Yes. Export through Apple's Data and Privacy portal, or export your macOS Photos library to a folder, then drag it into Ente's desktop app. We can talk through the export step on chat if Apple's tooling is unclear.
Most of the time is your upload bandwidth, not our setup. A library of tens of gigabytes typically uploads over a few hours to a day on a normal connection; very large archives are best left running overnight. We get the server ready the same day.
Yes. Because the server software is the same, we migrate your database and object storage to a managed instance and re-point your apps. Your accounts, albums, and keys carry over, so your team does not re-upload anything.
Yes. Tell us the subdomain you want and we configure it with a certificate. If you would rather we make the DNS change directly, send us access on chat. That is usually faster than a control panel.
No. One Ente account on one server covers both Ente Photos and Ente Auth, so your library and your two-factor codes share the same login and the same encryption. Switching between the two apps needs no extra setup.

03

Billing, support, and platform

€9 covers everything we do for that app: hardware in the region you choose, daily off-site backups with one-click restore, automatic security patches and version upgrades, 24/7 monitoring, SSL and firewall, and engineering support on email and the ticket section in the client portal. There are no setup fees or hidden line items. For more info see our Pricing page.
If you decide to continue, we charge €9/app/month from day 8. If you don't, the trial ends and you can export your data. No card is required for the trial, and we never auto-charge you without explicit consent.
No. The €9/month is flat regardless of how many users log into your app. Add 5 users or 50; the price doesn't change.
24/7 email and ticket support, both staffed by engineers who run the systems. We handle DNS configuration, SMTP setup, app integrations, performance tuning, troubleshooting, and migration help. Response time is typically under an hour. There is no tier system — every customer gets the same support.
Yes. Cancel from the dashboard. We don't charge a cancellation fee, we don't lock data, and we will export your data to you on request before deletion. data to you on request before deletion.
Every customer instance is backed up daily to a separate region from the primary. We test restores. You can request a restore at any backup point within the retention window — usually 7 days for daily backups.
Your application data sits in the region you choose at provisioning — 21 datacenter locations across six continents. Account-level data (billing, account email, support ticket history) is processed centrally. Application data region is picked by you, per app.
99.9% uptime SLA on every app, every tenant. Service credits are documented at danian.co/service-level-agreement. The status page is located at status.danian.co.
When your tenant approaches the resource ceiling — the base tier holds 1 vCPU/RAM, 30 GB storage — we notify you. Resource upgrades happen with your explicit consent; we will not upgrade your tenant or charge you without it.
We wait. We don't suspend the app or delete your data on the first failed charge. We email you, you fix the card on file, and we continue.
Invoices can be downloaded from the billing dashboard in PDF the day each charge succeeds. EU VAT is added where applicable and the VAT-reverse-charge regime applies for VAT-registered businesses with a valid number.
150+ open-source apps across automation, team chat, file sync, analytics, AI, password management, email marketing, dev tools, project management, smart home, CMS, and federated social. See the full catalog →
Yes. Every instance comes with a web-based terminal and a file manager in your DANIAN management dashboard. Useful for managing your data and customizations.
Resources scale with your usage. If your app needs more vCPU, RAM, or storage, we add it — and we ask first before any change to your plan. €9 is the floor; resource-heavy workloads may price higher, but you'll always know in advance.
Yes. We have both a Partner program and an Affiliate program available. Anybody can sign up.
No contract. No minimum commitment. Cancel anytime from the dashboard with one click. The 7-day free trial requires no credit card. After the trial converts to paid, you can still cancel at any month without notice or penalty.

DEPLOY IN YOUR REGION

21 datacenter locations on six continents

Pick the region closest to your users.

United States, Germany, Finland, Singapore, Australia, Brazil, Canada, Netherlands, UK, Spain, Italy, France, Sweden, Malaysia, India, Japan, Mexico, Poland, South Korea, Chile, South Africa and more coming soon

Global Reach Map

Try managed Ente for 7 days

No card. Cancel from the dashboard.