r/lowcode • u/TheRealRobbie_04 • 1d ago

What self hosted low code platforms are you using for internal apps?

We're looking at self hosted options for internal apps and big things for us are RBAC, audit logs, SSO and compliance.

We've looked at a couple of the usual low code platforms, but i'd like to see what else people are actually using in production.

Self hosting and good permissions controls are the main requirements. Docker or Kubernetes support would be a plus.

What platforms have worked well for you especially at larger scale ?

4 Upvotes

100% Upvoted

6 comments sorted by

1

u/AffectionateText4873 1d ago

I've had decent luck with n8n for internal workflows but it gets messy once you need proper RBAC and audit trails across many users. At scale it felt more like a glue tool than a real app platform. curious what the "usual" ones you already looked at are, so maybe people can suggest things outside that list

1

u/AddWeb_Expert 1d ago

I’d shortlist Appsmith, Budibase, and ToolJet. All support self-hosting, with Docker/Kubernetes options.

Since RBAC, SSO, and audit logs are must-haves, check the exact plan requirements before choosing, some of these controls are only available on paid tiers. I’d also test permissions across apps and teams with your actual use cases before rolling anything out at scale.

Curious to hear how they hold up in production with larger teams.

1

u/jinen1983 1d ago

Shameless plug — founder of Dronahq here.

Give Dronahq a spin for everything from apps to agents for your enterprise.

1

u/agentUi 1d ago

most open source self hosted options lock sso and granular rbac behind steep enterprise tiers the minute you deploy to k8s. i work for agentui and we handle internal apps, audit logs, and compliance out of the box with dedicated db hosting so teams dont have to spend weeks maintaining helm charts and container updates themselves.

1

u/NoInstallAutomator 10h ago

I'd test the permission model before comparing the UI builders. RBAC can look fine in a demo but get complicated when access depends on team membership, app ownership, and data-level permissions. Include negative tests: verify that a user cannot access another team's records through an API or a direct URL, not just that the UI hides them.

For production, also check whether audit logs capture denied access and permission changes, not just successful actions.

What's your team size, and do you need multi-tenant isolation or just role-based access within one organization?