Data ownership and where your data lives

SummitPSA is a self-hosted, all-in-one MSP PSA. That means the application and its data run on infrastructure you control — your own server or container host — not a multi-tenant cloud owned by a vendor.

Where your data lives

• Application database — tickets, companies, contacts, agents, time entries, invoices, settings, and audit logs are stored in your SummitPSA database.
• Uploaded files — attachments, branding logos, and similar assets are stored on the host filesystem and served from your instance.
• System settings — branding, security policy, and integrations are stored as configuration in the same database.

What this means for you

• Ownership. Because everything lives in your database and filesystem, you own and can back up, migrate, or export your data on your own schedule.
• Accountability. An audit log records security-sensitive actions — logins, agent and role changes, permission overrides, password and 2FA resets, and settings changes — with timestamps and originating IP addresses.
• Outbound integrations are opt-in. Data leaves your instance only when you configure an integration (for example, Teams or Slack webhooks, or an AI API key) under Settings.

Always maintain regular, tested backups of your database and uploads directory. As the host, you are responsible for the security and retention of your own data.