Professional infrastructure from your first domain to global scale.
Domains, DNS, business email, hosting, storage, and applied AI in one console — daily operations with per-organization isolation. Multi-region expansion as new nuclei come online.
Ilustração do console — não são dados ao vivo
One control plane — not a patchwork of integrations.
Infrastructure, platform, and product teams manage domains, DNS zones, corporate mailboxes, deployments, files, and AI quotas in one corporate environment — centralized identity, policy, and billing.
Enterprise platform, delegated operations
Each organization has its own tenant, quotas, and billing, with data segregated in the API. Admins and engineers provision resources in the console — without tickets for routine operational tasks.
Layered technical security
TLS via Let's Encrypt on managed domains, logical per-organization isolation, bcrypt (cost 12) password hashing, rotated refresh tokens, lockout after failed attempts, and server-side logging of authentication and selected sensitive actions.
End-to-end self-management
Domains, DNS, email, projects, hosting, AI consumption, and billing are administered in the console. Plan changes, limits, and cancellation follow the same flow — operational autonomy, not dependency on a sales queue.
Infrastructure primitives for production organizations.
From DNS zones to AI models in production: a coherent stack with governance where scale demands it and flexibility where engineering needs it — built for corporate environments and critical workloads.
Managed domains & DNS
Bring any domain, manage A, AAAA, CNAME, MX, TXT, SRV, and CAA records through a visual zone editor or our API. Automatic ownership verification, BIND zonefile export, no provider lock-in.
- Visual zone editor + API
- Export to BIND zonefile
- TXT-based ownership verification
- Editable TTLs and SRV priorities
Business email
Mailboxes and aliases on your own domain with strong password hashing, configurable forwarding, multi-destination aliases, and per-mailbox quotas. A real email server — not a forwarding hack.
- bcrypt password hashing
- Programmable forwarding rules
- Multi-destination aliases
- Per-mailbox quota and limits
File manager
Upload your application, edit files inline, version your work, and keep everything sandboxed per project. Drag-and-drop UI, live quota usage, and S3-compatible API for programmatic access.
- Drag-and-drop upload
- Inline text editor
- Live quota visibility
- Sandboxed per project
High availability
Configurable replicas per resource, load balancing across replicas, and periodic health checks. Multi-zone when two or more zones are active; multi-region on the roadmap.
- Configurable replicas
- Multi-zone (2+ active zones)
- Periodic health checks
- Auto-restart on failure
Applied AI
Domain-tuned assistants integrated into the workspace. Predictable monthly token quota, transparent overage at the line-item level, and usage tracked per organization. Dedicated model deployments available on Enterprise.
- Vertical-tuned models
- Monthly quota included
- Pay-as-you-go overage
- Dedicated deployments
Technical security
Logical per-organization isolation, TLS via Let's Encrypt, rate limiting per API key and per origin, configured CSP and HSTS headers, and server-side logging of selected sensitive events.
- Logical per-organization isolation
- TLS with automatic renewal (LE)
- CSP and HSTS configured
- Sensitive-event logging
Technical foundations of the platform.
Platform with per-organization isolation.
Orchestration and automation layer on compute nuclei. Each organization has its own tenant, billing, and segregated data. Production today runs on zone br-sp-1 (São Paulo); other regions on the landing page are planned expansions.
Zone br-sp-1 in production
Active nucleus in São Paulo (BR). UK, EU, US, and APAC regions are listed as future expansion — no production traffic runs there until we provision new nuclei.
Multi-zone resilience
When two or more zones are active in the same region, replicas can be spread across them. Multi-region requires nuclei on different continents (roadmap).
Sensitive-event logging
Login, authentication failures, and selected sensitive actions are recorded with timestamp, user, IP, and detail on the server (auth_eventos table).
One active zone — regional expansion planned.
Production today in São Paulo (br-sp-1). The United Kingdom, Germany, United States, and India on the map are on-demand regions, not operational clusters yet.
br-sp-1· São PauloActiveuk-west-1· WolverhamptonPlannedeu-north-1· HamburgPlannedus-east-1· New YorkPlannedus-central-1· DallasPlannedap-south-1· MumbaiPlanned
Transparent pricing. No surprise bills.
Start with what you need today, scale to your largest deployment tomorrow. Volume discounts and committed-use contracts available for Enterprise.
Freelancer Starter
Para builders independentes lançando seus primeiros produtos na Tesserra.
- 50k AI tokens / month
- 3 projects · 2 domains
- 10 email mailboxes
- 10 GB of files · 1 team members
- up to 1 replicas / resource
- 50k requisições IA/mês
- 3 projetos · 2 domínios
- 10 GB storage · 100 GB bandwidth
Starter IA
Most popularTimes iniciando desenvolvimento assistido por IA e deploys automatizados.
- 200k AI tokens / month
- 10 projects · 5 domains
- 25 email mailboxes
- 50 GB of files · 3 team members
- up to 2 replicas / resource
- 200k requisições IA/mês
- 10 projetos · automação
- 50 GB storage · 500 GB bandwidth
Pro
Produtos em crescimento com suporte prioritário e quotas maiores.
- 1M AI tokens / month
- 50 projects · 25 domains
- 100 email mailboxes
- 200 GB of files · 15 team members
- up to 5 replicas / resource
- 1M requisições IA/mês
- 50 projetos · 25 domínios
- 200 GB storage · 2 TB bandwidth
Business
Organizações que precisam de SSO, SLA e controles avançados.
- 5M AI tokens / month
- 100 projects · 100 domains
- 500 email mailboxes
- 1000 GB of files · 50 team members
- up to 10 replicas / resource
- 5M requisições IA/mês
- Projetos ilimitados · 100 domínios
- 1 TB storage · onboarding dedicado
Enterprise contracts. Dedicated regions. Custom SLAs.
We work with regulated industries, multinationals, and high-throughput AI products. Talk to our team about dedicated capacity, on-prem connectivity, bespoke compliance reviews, and committed-use pricing.
Built by a distributed team.
Tesserra is operated by a remote-first team headquartered in São Paulo, Brazil. Founded in 2022 to deliver an enterprise infrastructure layer — domains, DNS, business email, hosting, storage, and applied AI — in a fully self-managed console with unified identity and billing per organization.
Customer support is delivered directly by the engineering team. When you escalate a ticket, you reach the people who built the system — not a script or an outsourced queue.
A lean team on the control plane.
Engineering, infrastructure, and product in one loop — the same people who design also operate and support what customers run in production.
Core services, multi-tenant isolation, and APIs for domains, DNS, provisioning, and per-organization billing.
Multi-region nuclei, capacity planning, observability, and the operational posture of production workloads.
Console, onboarding for new organizations, and direct support from the people who built the system — no outsourced queue.
Based on Avenida Paulista, São Paulo.
Our office sits in the corporate corridor of Avenida Paulista, in the Bela Vista district. The avenue concentrates a large share of the country's financial, technology, and consulting headquarters, and is well served by metro and major bus lines.
Visits are by appointment only. The engineering team operates remote-first, but the address is open for customer meetings, vendor reviews, and on-site contract signing.
Bela Vista, São Paulo — SP
Brazil
Why work at Tesserra
We are a self-managed cloud platform built by people who run real production. You ship features enterprise customers use the same day — DNS, provisioning, billing, webmail — with technical autonomy and world-class documentation.
Work from where you perform best, with Paulista hub meetups when it matters.
Small teams, fast decisions, and direct contact with people using the product.
FastAPI, Next.js, Docker, Ollama, Stripe — all in production, not on slides.
Budget for certifications, conferences, and protected learning time.
Build enterprise infrastructure with us.
We hire engineers and operators who want depth — production systems, clear ownership, and direct contact with customers. Remote-first, with a corporate hub in São Paulo for in-person collaboration when it matters.
View open rolesEnterprise infrastructure on a single control plane.
Tesserra was founded in 2022 so mid-size and large organizations can run domains, DNS, business email, hosting, storage, and AI workloads in a fully self-managed environment — without a fragmented vendor catalog or ad hoc integrations.
Each customer organization has its own tenant and invoice, with logically segregated data in the API. Payment via Stripe in BRL, USD, or EUR, with PDF invoice export.
Almost everything you'll want to know.
How does AI token billing work?
Every plan includes a monthly token quota. Overage tokens are billed at a small per-thousand rate on the next invoice, with a per-line-item breakdown. Real-time usage is visible in the dashboard at all times, and you can set hard caps to prevent overage entirely.
Do I need a domain to subscribe?
No. You can sign up first, explore the platform, and add one or more domains whenever you want — within your plan limits, at no extra cost. Bring an existing domain or transfer one to us; we handle DNS, TLS, and email setup automatically.
Do you operate your own email servers?
Yes. You create mailboxes on @yourdomain directly from the dashboard, set quotas, configure forwarding, and manage aliases. Email is included in plan limits — no separate invoice from a third-party email vendor.
How do you address availability?
Periodic health checks and auto-restart when compute stops. The Health console shows real state (up / down). Detailed SLA and throughput metrics arrive with Prometheus/Insight. Contractual SLAs are negotiated on Enterprise plans.
Do you offer dedicated regions or on-prem connectivity?
On request, on Enterprise plans. Talk to our team — we don't publish standard SLAs or pricing for these scenarios.
What does your security review process look like?
For security review and DPA, contact our team. Documentable technical controls today: TLS (Let's Encrypt) on managed domains, logical per-organization isolation, bcrypt (cost 12) password hashing, rotated refresh tokens, lockout after failures, CSP/HSTS headers, and server-side logging of authentication and selected sensitive actions. Formal audits (SOC 2, ISO 27001) have not yet been completed.
Can we run dedicated AI model instances?
On Enterprise plans, dedicated GPU capacity can be negotiated. Self-serve plans use a shared pool with a monthly token quota.
Can I cancel any time?
Yes. There's no long-term commitment on self-serve plans. Cancel from the customer portal — your access continues through the end of the paid cycle. Enterprise contracts have committed terms negotiated upfront.
How is my workspace isolated?
Each organization has data segregated by tenant_id in the API, files in a per-project directory, short-lived access tokens with rotated refresh and lockout, and strict security headers in the console. Login and selected sensitive actions are logged on the server.
Where is my data stored?
Production data today lives on the br-sp-1 nucleus (São Paulo). Other regions on the map are planned — contact sales for residency requirements. You are the data controller; Tessera acts as processor (LGPD/GDPR).
How does payment work?
Via Stripe in BRL, USD, or EUR (credit card or ACH/SEPA). We issue an invoice and PDF every cycle. Payment methods, plan changes, and cancellation are self-service in the dashboard. Enterprise customers can pay via PO and bank transfer.
Production infrastructure under your organization's control.
Access the console, evaluate the platform at your pace, and scale to enterprise contracts with dedicated regions, custom SLAs, and compliance reviews when operations require it.