Portainer

Portainer additional costs include setup fees, maintenance charges, and support fees, as outlined below:

Setup Fees

• Portainer Business Edition offers onboarding services included in certain plans (e.g., Scale or Enterprise). Additional setup assistance beyond standard onboarding may incur extra charges on a time-and-materials basis at current rates.

Maintenance Charges

• Maintenance costs are typically covered under subscription fees for Business Edition plans. These include automatic updates, security patches, and ongoing feature enhancements.

• For managed services via third-party providers like Elestio, hourly resource usage is billed based on the selected cloud provider and instance type.

Support Charges

• Basic support is included with Business Edition subscriptions; advanced support options (e.g., 24x7 Global Support SLA) are available for an additional fee.

• Consulting, implementation, and configuration services outside the scope of standard support are charged on an hourly basis at prevailing rates.

• Managed platform services for accelerating containerization journeys may also incur extra costs.

Portainer offers a variety of training and support options for new users:

Training Options

• Self-Paced Courses: Portainer Academy provides self-paced video lessons and tutorials, covering topics like container deployment, stack creation, Kubernetes integration, and troubleshooting.

• Interactive Tutorials: Step-by-step guides are available for tasks such as deploying containers, viewing logs, and configuring environments.

• Webinars: Regularly scheduled training webinars help users get started with Portainer in production environments.

• Best Practice Guides: Comprehensive documentation and setup guides ensure users can implement Portainer effectively in production settings.

• Reference Architecture: Validated design models offer detailed insights into Portainer's stack components for optimized deployment.

Support Options

• Documentation: Extensive online documentation covers installation, features, and functionality for both Community and Business Editions.

• AI Chatbot: Users can access an AI bot integrated into the documentation site for quick answers to common questions.

• Community Support: Free users can seek assistance via GitHub Discussions or the active Slack channel.

• Business Support: Paid Business Edition customers receive dedicated support through ticketing systems, with SLAs ensuring timely resolution of issues.

• Knowledge Base: A repository of common questions and solutions is available for self-help troubleshooting.

Portainer implements a range of security measures to protect data and ensure safe container management:

Access Control and Authentication

• Role-Based Access Control (RBAC): Administrators can assign granular permissions to users and teams for specific environments, ensuring secure access control.

• Integration with External Authentication Providers: Supports LDAP, OAuth, Azure Active Directory, and other authentication systems to centralize credential management.

• Activity Logs: Tracks user actions within environments to monitor and prevent unauthorized activities.

Platform Security:

• Self-Hosted Deployment: Portainer runs exclusively on users' servers, behind their firewalls, ensuring no external exposure of infrastructure.

• Air-Gapped Functionality: Can operate completely disconnected from the internet without impacting functionality.

• API Endpoint Proxy: Prevents external exposure of Kubernetes/Docker APIs by acting as a secure proxy.

Administrative Security Controls

• Disable Bind Mounts for Non-Admins: Blocks non-admin users from attaching host file system paths to containers.

• Disable Privileged Mode for Non-Admins: Prevents non-admin users from elevating container privileges to bypass SELinux/AppArmor protections.

• Disable Host PID 1 Usage: Restricts non-admin users from deploying containers that operate as host PID 1, mitigating root-level access risks.

• Disable Device Mappings for Non-Admins: Prevents unauthorized users from mapping host devices into containers, reducing risk of data breaches.

Image and Supply Chain Security

• Vulnerability Scanning: Published images are scanned for vulnerabilities during the DockerHub process, ensuring secure container images.

• Secure Image Management: Enables access to trusted images and integration with third-party OAuth solutions for enhanced security in Kubernetes clusters.

Compliance

• GDPR Compliance: Anonymous analytics collected by Portainer comply with GDPR standards, with the option to disable data collection at any time.

• Third-Party Vulnerability Analysis: Regular external audits identify and resolve security issues within six weeks.

​Portainer is a container management platform that operates exclusively on your servers, within your network, and behind your own firewalls. This architecture ensures that all your data remains under your control, aligning with your existing data ownership and portability policies.

Regarding data analytics, Portainer collects anonymous usage statistics through Matamo Analytics, which is hosted in Germany and fully GDPR-compliant. During the initial setup, you have the option to disable analytics, and if you choose to do so or operate in an air-gapped environment, data collection will silently fail without impacting functionality. ​portal.portainer.io+1GitHub+1portal.portainer.io+3GitHub+3Welcome | Portainer Documentation+3

Portainer's open-source nature, licensed under the MIT License, further emphasizes its commitment to user autonomy, allowing you to modify and distribute the software as needed.

Portainer provides flexible and straightforward terms for scaling up or down to meet organizational needs. Key aspects include:

1. Manual Scaling: Users can manually adjust the number of service replicas through the Portainer GUI by navigating to the "Services" menu and selecting the desired scaling level. This allows precise control over resource allocation.

2. Dynamic Scaling: Portainer supports elastic scaling across Docker and Kubernetes environments, enabling organizations to scale workloads up or down based on demand.

3. Resource Limits and Quotas: Administrators can set memory, CPU, and storage limits for services or containers, ensuring efficient resource utilization while preventing overconsumption.

4. Multi-Cluster Scalability: Portainer simplifies scaling across multiple clusters, whether on-premises, in the cloud, or at the edge, providing a unified management experience.

5. Lifecycle Management: The platform includes tools for managing container lifecycles, from deployment to scaling and maintenance, ensuring seamless operations as needs evolve

The terms and conditions for contract renewal and cancellation for Portainer:

Renewal Terms:

1. Automatic Renewal: Subscriptions automatically renew for successive annual periods unless either party provides written notice of non-renewal at least 30 days before the end of the current subscription term.

2. Fee Adjustments: Portainer may increase fees at the start of each renewal period with at least 30 days' notice. If users do not wish to pay the increased fees, they can terminate the agreement before the renewal period begins

   .

3. Home & Student Licenses: Renewal for free licenses (e.g., 5 Nodes Free) requires users to complete a form, and new license keys are issued 14 days before the current license expires.

4. Non-Commercial Use: Free licenses are available only for non-commercial use, and businesses must switch to paid subscriptions upon renewal.

Cancellation Terms:

1. Termination for Convenience: Users can cancel subscriptions by providing written notice at least 30 days before the end of the current term.

2. Termination for Breach: Portainer may cancel agreements immediately if users fail to comply with terms or payment obligations, or if breaches are not remedied within 30 days of notice.

3. Effect of Termination: Upon termination:

   • All rights and licenses granted under the agreement are revoked.

   • Users must discontinue use of the software and delete all copies.

4. No Refunds: Fees paid for subscriptions are non-cancelable and non-refundable, even upon early termination.

5. Suspension of Service: Portainer may suspend access to services if overdue payments exceed 30 days.

​Portainer is a container management platform that operates exclusively on your servers, within your network, and behind your own firewalls. This design means that Portainer does not host your infrastructure, and as a result, it does not currently hold SOC (System and Organization Controls) or PCI DSS (Payment Card Industry Data Security Standard) compliance certifications. ​

• Regarding data protection regulations, Portainer complies with the General Data Protection Regulation (GDPR) concerning the optional anonymous usage analytics it collects. During installation, you have the option to disable data collection, and if your installation is air-gapped (disconnected from the internet), the collection will silently fail without affecting functionality. ​

• Portainer also conducts regular third-party vulnerability analyses. While no issues have been reported for some time, any discovered vulnerabilities are resolved within six weeks..