Self-Hosted Relational Spreadsheet: Grist behind Zero-Trust VPN & SSO
Structured Database Power with Spreadsheet Usability
The Sovereign, Zero-Seat Airtable Alternative
Freedom from SaaS Lock-In & Per-Seat Tax
Replace Airtable or Smartsheet with True Data Custody
Proprietary low-code and relational platforms like Airtable charge steep monthly per-seat fees, throttle API limits, and store your core business operational data on public multi-tenant clouds.
The RemoteRails Appliance integrates Grist Core, an open-source relational spreadsheet engine, shielded entirely behind managed WireGuard VPN and Defguard identity management. Your teams get the intuitive interface of a spreadsheet powered by the relational integrity, formulas, and schema control of a real database – hosted directly on your private server with zero per-user licensing costs.
“Moving our operational data off multi-tenant clouds and into our own perimeter was the easiest security win of the year. The zero-seat licensing is just the cherry on top.”
— Director of Operations, Private Equity Firm
Ready for Any Business Workflow
Because Grist acts as a full relational database, it can replace dozens of fragmented point solutions. Instantly deploy templates for mission-critical operations:
Lightweight CRM & Sales
Track deal pipelines, client communications, and revenue projections.
Inventory & Asset Management
Map multi-warehouse stock, track IT equipment checkouts, and manage vendor purchase orders.
HR & Applicant Tracking
Manage interview stages, employee onboarding, and automated payroll/timesheet calculations.
Project & Grant Management
Link deliverables to budgets, track agency billable hours, and monitor multi-phase project deadlines. And dozens of other use cases – fully customizable to your exact operational needs.
Enterprise Flexibility with Airtight Zero-Trust Security
Engineered for Zero-Trust Access & External Collaboration
Every workflow runs directly within your private infrastructure boundary – giving you the agility of modern low-code tools without the security compromises of public SaaS. RemoteRails seamlessly bridges airtight zero-trust isolation with frictionless external data collection.
Dual-Domain Edge Routing for Public Forms
A core challenge of zero-trust architecture is handling public intake without compromising the perimeter. RemoteRails solves this with a custom Traefik routing middleware:
Internal Zero-Trust (grist.yourdomain.com): Your complete relational databases, internal dashboards, and schemas remain strictly isolated behind the WireGuard VPN with biometric/FIDO2 SSO enforcement.
Public Edge Gateway (forms.yourdomain.com): Safely accept external survey responses, client intake forms, and job applications from anyone on the public web. The custom Traefik middleware strictly permits form-submission payloads while cryptographically walling off access to internal workspaces and records.
Real Python Formulas & Relational Data Integrity
Unlike Airtable’s proprietary formula syntax, Grist uses pure Python for computed columns. Build complex calculations, import standard Python libraries, and define relational foreign keys without leaving the spreadsheet UI. Every document is backed by an independent, standard SQLite database under the hood – giving your organization genuine data sovereignty and direct portability.
Native Forward Auth with Just-In-Time (JIT) Provisioning
In standard open-source deployments, enterprise identity requires complex SAML proxies. RemoteRails utilizes the official Forward Auth engine built into Grist Core, orchestrated through Traefik and Defguard. Defguard verifies the biometric/FIDO2 session and passes verified identity headers directly into Grist. New team members are automatically provisioned Just-In-Time upon their first authenticated request.
Granular Access Rules
Enforce row-level, column-level, and view-level access controls natively inside Grist. Define fine-grained access policies based on user attributes passed from the SSO layer, ensuring contractors only see the specific rows relevant to their clearance.
Ready to reclaim your data?
Add self-hosted Grist to your RemoteRails deployment today.
Compare the True Cost of Ownership
Why Self-Hosted Grist Beats Airtable
The Startup Advantage: Companies with under $1M in annual revenue qualify for a 100% free Full Version Grist license, unlocking advanced automations and scheduled webhooks with zero seat limits.
$20-45
per user/month
Airtable / Smartsheet
~$2,400 – $5,400 / year (Separate recurring tax for a 10-user team)
✕
Shared SaaS domain
✕
Paywalled SSO / SAML
✕
Closed, proprietary formula lock-in
✕
Multi-tenant cloud (zero data custody)
✕
Public Internet exposure (No VPN)
$0
unlimited users
Self-Hosted Grist
$1,840 one-time add-on (Runs on your Appliance with zero recurring seat costs)
✓
Dedicated forms.yourdomain.com
✓
Built-in Defguard OIDC Forward Auth & JIT Provisioning
✓
Standard Python 3 execution environment
✓
Open, portable SQLite databases per document
✓
Protected behind WireGuard VPN & Zero-Trust Access
Enterprise-Grade Architecture
Relational Spreadsheet Layer
Built on a modern, containerized stack with deep integration into the RemoteRails identity and routing perimeter.
Deploy with confidence knowing your schemas, user access rules, and raw data are backed by local, RAID-protected storage under your complete control.
“We finally have the raw querying power of a relational database with the usability of a spreadsheet, all without worrying about our proprietary formulas leaking to a third-party AI trainer.”
— Chief Technology Officer, Deep Tech Startup
Technical Specifications
Hardware, Routing & Software Stack Details
Engine:
Grist Core
Authentication:
Forward Auth via Traefik & Defguard OIDC
Routing & Ingress:
Traefik edge proxy with dual-domain isolation (grist. on VPN / forms. at public edge)
Database Architecture:
Per-document SQLite storage engine; direct export to .grist, .csv, .xlsx
Access Control:
Cell, column, and row-level formulaic access rules
Persistence & Backup:
RAID-backed local NVMe/SSD storage; compatible with automated Restic snapshots