Should I Deploy My Web App on a Customer’s Internal Server or Explore Other Options?

If you own the code, definitely avoid on-prem unless your client is a large, reputable business. Smaller or offshore companies might exploit your code and stop payments. A good compromise could be to let them manage their database while keeping the backend hosted on your server.

Managed Private Cloud often meets the highest security standards while keeping the app easier to maintain. While on-prem is doable, it could make your support model more complicated and financially draining during outages.

I usually recommend a Managed Private Cloud before agreeing to on-prem solutions. With a dedicated VPC/server that’s physically isolated from others, you can manage it while still addressing their security needs. This way, you maintain control over logs and updates, which is crucial because debugging on a server you can't access can be a nightmare.

It’s quite common in B2B settings to offer custom pricing for on-prem installations. Just remember, maintaining and upgrading these setups is typically way tougher, so plan accordingly.

Absolutely, consider hosting the database on their server with your application on your server while implementing end-to-end encryption. This retains a level of security while allowing for operational efficiency. It's often referred to as hybrid hosting in industry terms.