Documentation

AI Insights Gateway setup

Install the desktop Gateway on a Windows machine inside your network so the cloud can securely query your on-premises databases without ever exposing them to the public internet. Five minutes, three steps.

Windows 10 / 11 / Server 2019+x64 only. No .NET runtime install required — the .exe is self-contained.
Data stays on-premCredentials never leave your network. The cloud sends queries; the gateway sends results.
Outbound HTTPS onlyThe gateway initiates all connections. No inbound firewall rules needed.

1 Download the installer

From any browser signed in as the organization admin.

  1. Sign in to aiinsights365.net as an Org Admin.
  2. Open Settings → Manage Gateways.
  3. Click Download Gateway (Windows) — you'll get AIInsightsGatewaySetup.exe (~80 MB).
  4. Copy the .exe to the on-prem machine that will host the gateway.
Which machine? Any Windows server or workstation that (a) can reach the SQL Server / PostgreSQL / MySQL you want to query, and (b) has outbound HTTPS access to aiinsights365.net. The gateway runs as a normal user app — no domain admin rights needed.

2 Generate a registration token

Single-use, org-scoped, expires in 24 hours.

  1. Back in Settings → Manage Gateways, click Generate Token on the Registration Token card.
  2. Click Copy — the token is now in your clipboard.
Tokens are single-use. If you need to set up a second gateway on a different machine, generate a fresh token. If you mistype it on the gateway, generate a new one (the old one is consumed).

3 Install and connect

On the on-prem Windows machine.

  1. Double-click AIInsightsGatewaySetup.exe.
    Windows SmartScreen may show "Windows protected your PC" on first launch — click More info → Run anyway. (The installer isn't code-signed yet.)
  2. The gateway window opens with a sign-in form.
  3. Enter your org admin email + password (the same ones you use at aiinsights365.net).
  4. Paste the registration token from Step 2.
  5. Click Register Gateway. The status indicator turns Online within ~30 seconds.
  6. Back in the portal, refresh Settings → Manage Gateways — your gateway should appear in the table with status Online and a recent heartbeat.

4 Connect an on-prem datasource through the gateway

Now you can route any on-prem database through this gateway.

  1. Open any workspace → Add Datasource.
  2. Pick the type (e.g. SQL Server) — a "Gateway required" banner appears.
  3. Verify the Route via Gateway toggle is on.
  4. Pick your newly-registered gateway in the dropdown.
  5. Enter the connection string the gateway will use locally:
    Server=YOUR-SQL-HOST;Database=YourDb;User Id=svc_aiinsights;Password=...;TrustServerCertificate=true
  6. Click Test & Load Fields. The gateway opens the connection from inside your network and returns the table list to the cloud.
  7. Pick tables to expose, click Connect & Finish.
The connection string lives on the cloud (encrypted at rest), but only the gateway ever uses it. The cloud sends queries to the gateway over HTTPS; the gateway opens a local SQL connection, runs the query, and sends the rows back. The on-prem server never sees an inbound connection from the public internet.

? Troubleshooting

Common errors and what to do.

Error you seeWhat to do
Named Pipes Provider, error: 40 The cloud tried a direct connection (gateway routing didn't engage). Confirm the "Route via Gateway" toggle is on when you click Test & Load Fields.
Gateway did not respond in time The gateway is offline or unreachable. Check Settings → Manage Gateways → last heartbeat timestamp. If it's more than a minute ago, restart the gateway app on the on-prem machine.
Gateway not found or not accessible The gateway was revoked or belongs to a different org. Re-register it from the on-prem machine using a fresh token.
0 fields loaded / No tables discovered The connection succeeded but the SQL user can't read INFORMATION_SCHEMA. Grant VIEW DEFINITION or use a user with at least db_datareader.
SmartScreen "Unknown publisher" The installer isn't Authenticode-signed yet. Click "More info → Run anyway" once. The .exe is otherwise unmodified from our build.

Ready to install?

Head to Manage Gateways and grab the installer.

Go to Manage Gateways