Self-hostedAI agent platforms,compared.

Customer-hosted: a Papyrus VM in the customer's Azure subscription, or on-premises, restricted or disconnected environments.

Azure Marketplace private offer that deploys the Papyrus VM into the customer's subscription.

Governed execution: consequential actions are reviewed and work stays visible as it progresses.

Commercial: a signed organization license (offline) or a customer-specific Azure private offer.

Not found in checked official pages.

Organizations that need back office automation on their own infrastructure, in business and government settings.

No public price card; commercial terms are scoped to the deployment.

Deploys into the customer's own Azure tenant and subscription; AWS and GCP listed as coming 2026.

Vendor site links a 'Corral AI managed app' Azure Marketplace listing (azure-application URL path).

Admin approval gates the agent publish flow, and high-risk actions need a human after untrusted content; other actions are not described.

Not found in checked official pages.

Documented: on-tenant residency, private endpoints/VNet, immutable audit trail, content filtering/PII detection, identity-provider governance.

Lists Ops & Product Teams, IT & Security Teams, Developers, Service Providers/SIs, Product Companies.

No prices listed; platform subscription plus Azure infra costs via Marketplace, counting toward MACC; Enterprise plan via 'Talk to us'.

Self-hosted: desktop download (macOS DMG) on vendor site; AWS listing ships an AMI run in buyer's AWS account.

No Azure Marketplace listing found; only an AWS Marketplace AMI listing was found.

Only simple 'Ask User' and 'Present Choices' skills let an agent request approval or a choice; no broader approval policy is described.

AWS listing: EULA applies; community edition with one worker, more workers via separately purchased license.

Documented: AES-256 at rest, TLS 1.2+, per-organization container folder scoping, token-authenticated websockets, token scrubbing.

AWS listing targets organizations wanting production-ready self-hosted agentic AI infrastructure.

No prices listed; AWS listing says community edition with one worker, billing external via vendor license.

Runs on your own laptop or server; install via script, npm, Docker, Nix or source; remote access via SSH/Tailscale. README says no hosted service.

No official Azure/Microsoft Marketplace listing found in first-party pages. A web search surfaced third-party publisher listings (not fetched; unverified).

Exec approvals (deny, allowlist, ask, auto, full) gate host command execution only and can be switched off; not a general approval layer.

MIT License, copyright OpenClaw Foundation (2026).

Gateway auth, DM pairing and allowlists, optional sandboxing (off by default) and an audit CLI; documented as a single-trusted-operator model, not a multi-tenant boundary.

Individuals wanting a personal assistant, teams sharing a gateway, and enterprise/security teams hardening via configuration, not a separate edition.

README says no paid tier, hosted service, or token. Model API and hosting costs are borne by the user.

Local/self-hosted (npm, Docker), plus OpenHands Cloud (managed) and OpenHands Enterprise (licensed self-host in your VPC or managed).

No Azure/Microsoft Marketplace listing found for OpenHands in first-party pages or search.

SDK confirmation policies (always, never, risky) can require approval of actions; documented for the SDK, and one call path bypasses them.

Root LICENSE of OpenHands/OpenHands is MIT (OpenHands contributors, 2025). Docs say each repository has its own license.

Docs name: Docker sandbox isolation for the agent server, security analyzers with risk levels, Enterprise SAML/SSO, RBAC and access controls (Cloud).

Developers and engineering teams, including enterprises wanting control over models, data, access and auditability.

Local open source: free. SaaS Individual: free, 10 daily conversations. Enterprise: custom pricing, contact sales.

Self-hosted on your own server, running as Docker containers.

Docs say Websoft9 is an Azure Marketplace partner; products are VM images deployed to an Azure VM.

No approval or human-in-the-loop controls documented for agent actions.

Repository states LGPL-3.0 and homepage says 100% open source; republishing images to cloud marketplaces without authorization is prohibited.

Multi-user accounts with role-based access; SSL certificates via Let's Encrypt; apps isolated through Docker.

Cloud architects, IT teams and SMBs without dedicated IT, plus software vendors, integrators and cloud providers.

Software plans: Free 0, Starter CNY 20/mo, Standard CNY 99/mo (per vendor pricing page); Azure image billing not described.