Hosting your own EDC gives you control and a longer to-do list. A SaaS EDC removes much of the infrastructure work and leaves you to manage vendor dependence and release cadence. This guide compares them on the six things that decide the choice, and says where on-prem is the right answer.
Free sandbox · No credit card · 21 CFR Part 11 aligned
| On-premise (self-hosted) | SaaS | |
|---|---|---|
| Servers, patching, backups | You | Supplier |
| Software upgrades | You schedule | Supplier releases |
| Platform validation evidence | You produce | Supplier provides, you assess |
| Study build and UAT | You | You |
| Physical data location | Your choice | Supplier regions |
| Time to first study | Weeks to months | Days |
The short answer
The two models
In an on-premise or self-hosted model, the EDC runs on infrastructure you control: your data centre, your cloud account or a managed server. You install the software, operate the database, apply patches, take backups and run upgrades. REDCap is the best-known example in academic research: your institution installs it and supports it, usually without a licence fee. Commercial on-prem EDCs exist too.
In a SaaS model, the supplier runs the platform and you use it through a browser. The supplier patches, backs up, scales and releases updates. You configure your study and manage your users. The SaaS category now includes self-serve platforms where a team can sign up and build a study without a sales process; see self-serve EDC platforms.
Six factors
| Factor | On-premise (self-hosted) | SaaS |
|---|---|---|
| Validation burden | You validate the installation, infrastructure and every upgrade as well as your configuration. Heavy but fully in your hands. | You assess the supplier and validate your configuration. Releases need triage. Lighter, with less direct control. See the GxP cloud validation guide. |
| Upgrades | You choose when, and can freeze a version for a long study. You also carry the work and the risk of a delayed security patch. | Supplier-driven. Fewer delayed patches, less choice over timing. Check release notice terms. |
| Infrastructure and security | You need staff or a contractor for servers, patches, backups, monitoring and disaster recovery. | Supplier operates it; you review evidence and manage users and passwords. |
| Data residency and sovereignty | Complete control of location and network boundaries. | Depends on the supplier's regions. Capture is hosted in the EU (Frankfurt) and the USA (N. Virginia). Ask which applies to your study. |
| Cost | Licence may be low or zero; staff, hardware or hosting, validation and support are the real cost. Hard to see early. | Subscription or usage-based pricing; predictable, and includes the operations. See EDC pricing guide. |
| Control and customisation | Deep control, including code-level customisation in some products. More to maintain. | Configuration within the product's limits. Faster, less bespoke. |
| Time to start | Needs an installation that already exists or weeks to build one. | Often days. A free sandbox lets you test before committing. |
| Exit | Data is already in your database. Platform retirement is yours to plan. | Needs a documented export of data and audit history at termination. |
These are tendencies. A well-run on-prem install can beat a poor SaaS deployment on any of them.
Where the work lands
On-prem validation is a project. You write or reuse a validation plan, qualify the installation and infrastructure, test the application in your environment, and repeat a proportionate version at each upgrade. A regulated REDCap programme shows the shape of it in REDCap hosting and validation burden. Teams that do this well tend to have an IT quality function, and the cost is shared across many studies. For a single investigator-led trial, it is often the largest line item nobody budgeted.
SaaS validation is lighter in effort and different in kind. You run a supplier assessment (see the EDC vendor audit checklist and vendor security questionnaire), validate your configuration with UAT, and run change control when the vendor releases. The EDC validation checklist covers the study side in either model.
On-prem platform tasks
9
SaaS platform tasks
4
Study-level UAT (both)
1
On-prem only
Each major release
SaaS
SaaS, yearly
Build a study in the free Capture sandbox: forms, edit checks, queries, roles and audit trail, with no installation. Free, every feature, no credit card.
A fair view of self-hosting
Self-hosting is the better answer in specific situations, and a buying guide that pretends otherwise is not useful.
If law or contract requires data to remain inside a specific network or country that no SaaS region covers, you host it yourself. Some national research networks and public bodies are in this position.
A university with a staffed REDCap service, validated processes and support has paid the fixed cost. For investigator-led studies, using it is often the sensible default. The question is how it copes with external sponsors and sites outside the institution.
Multi-year registries or cohorts sometimes want a platform version that does not change. On-prem gives that, at the cost of patching diligence.
If the study needs custom code or integrations the SaaS product does not allow, owning the stack helps.
Where Capture fits
Capture is a self-serve SaaS platform for EDC, eCRF, ePRO, eConsent and randomization, suitable for Phase 1 to Phase 3. It is hosted in the EU (Frankfurt) and the USA (N. Virginia). You do not install anything; you build your study, test it free in the sandbox, and pay only when you go live with real participants. It is not an on-premise product.
EU (Frankfurt)
Default for EU-sponsored studies
US (N. Virginia)
Default for US-sponsored studies
Decision rule
Answer in order. Stop at the first firm no-go.
If yes, on-prem. Check the actual text of the rule rather than a summary of it.
If yes and the study is investigator-led, start there. Check how external sites and sponsors will access it.
If you cannot name a person or contractor and a backup test date, the on-prem option is not yet real.
If you need a frozen version for years, SaaS needs a contract term for that, or you choose on-prem.
Match the supplier's regions to your requirements. See REDCap alternatives for European universities for an EU view.
Compare subscription with hardware or hosting, validation and support hours. The SaaS cost is visible; the on-prem cost is easy to miss.
SaaS EDC is run by the supplier, and you use it in a browser. On-premise EDC is installed and operated on infrastructure you control, so you handle servers, backups, upgrades and platform validation.
Not inherently. Compliance depends on controls, validation and procedures in both models. On-prem gives you more direct control and more to prove. SaaS shifts infrastructure work to the supplier and adds supplier assessment.
REDCap is normally installed and hosted by the institution, which makes it a self-hosted model from the researcher's point of view, with institutional support. Check how your institution validates and supports it.
On-prem can have lower licence costs but adds hardware or hosting, staff time and validation. SaaS has a visible subscription and bundles operations. Compare the total over the life of the study, including staff hours.
Capture is hosted in the EU (Frankfurt) and the USA (N. Virginia). Ask during a demo which region applies to your study.
Agree release notice terms with the supplier, triage each release against your intended-use list, retest functions with high-risk impact and record the decision.
It is possible but needs a migration plan: export with data dictionary and audit history, rebuild forms, import, reconcile and retire the old system under change control. Avoid it mid-study unless needed.
No. Capture is a SaaS platform. If you must host on your own infrastructure, a self-hosted EDC is the right category for you.
Keep exploring
GxP cloud validation guide
How to validate a cloud system.
REDCap hosting and validation burden
The self-hosting workload in detail.
EDC vendor audit checklist
Supplier assessment questions.
Self-serve EDC platforms
SaaS without a sales process.
EDC software pricing guide 2026
Cost models explained.
REDCap alternatives for European universities
EU hosting view.
Free sandbox with every feature. No credit card, and you pay only when you go live with real participants.