New: On-premises connector, securely connect internal systems
You can now connect internal systems behind your firewall to 9brains. The new on-premises connector establishes an encrypted WireGuard tunnel into your company network, making databases, ERP systems, file servers and other internal services reachable for the platform.
What is possible?
Section titled “What is possible?”The on-premises connector provides the secure network connection to your internal systems. In combination with an integration (e.g. PostgreSQL) or a skill, the AI assistant can then work directly with these systems:
- Query databases: Set up a PostgreSQL integration and ask questions in natural language
- Connect ERP systems: Create a skill that talks to your ERP system’s API
- Index files: Connect an internal file server or NAS as a data source
Supported systems
Section titled “Supported systems”The connector is protocol-agnostic, anything reachable via TCP works:
- Databases: PostgreSQL, MySQL, MS SQL Server, Oracle
- ERP/CRM: Odoo, SAP, Microsoft Dynamics
- File servers: SMB/CIFS, NAS systems, Nextcloud
- Web applications: Internal APIs, BI dashboards, monitoring systems
- Directory services: Active Directory, LDAP
Security
Section titled “Security”- Outbound only: 9brains connects to your systems, your network is not reachable from the outside
- Encryption: WireGuard with state-of-the-art cryptography
- Tenant isolation: Every workspace has its own tunnel and key pair
- Least privilege: Only the explicitly configured services are reachable
How to set it up
Section titled “How to set it up”- Open Settings → On-premises connector
- Create a tunnel (name, endpoint, peer public key of your firewall)
- Enter the displayed public key as a peer in your firewall
- Add services (e.g. database at
192.168.10.5:5432) - Set up a matching integration or skill that uses the service
A detailed guide is available under On-premises connector.
Availability
Section titled “Availability”The on-premises connector is available from the Business license onward and can be configured by workspace administrators.