---
title: "System Requirements"
description: "Network, identity, and client requirements for a production RIKAISO tenant."
source: "https://help.rikaiso.com/2025.2/system-requirements"
version: "2025.2"
latest: false
language: "en"
section: "Get Started"
updated: "2026-09-01"
---

# System Requirements

> Network, identity, and client requirements for a production RIKAISO tenant.

## Client

A production workstation needs 8 GB of memory, a 1440×900 display or larger, and a supported browser. The client is a single-page application; no desktop installation is required.

## Network

| Requirement | Value |
| --- | --- |
| Outbound HTTPS | 443 to `*.rikaiso.example` |
| Latency to region | 150 ms round trip or lower |
| Bandwidth per active user | 250 kbit/s sustained |
| TLS | 1.2 minimum, 1.3 preferred |

Proxies must not rewrite the `Authorization` header and must allow WebSocket upgrades. Deep packet inspection appliances should exempt the tenant domain, otherwise streaming assistant answers arrive in one block at the end of the request.

## Identity

Single sign-on is required for production tenants. RIKAISO accepts SAML 2.0 and OpenID Connect. Local accounts remain available as break-glass access for a maximum of two named administrators.

## Data residency

Choose a region at tenant creation. Moving a tenant between regions is a scheduled operation performed by RIKAISO Operations and takes up to four hours, during which the tenant is read-only.

> Sandbox tenants share the platform baseline but are sized for ten concurrent users and are not covered by the production service levels.