The services every builder needs — auth, a database, object storage, compute, analytics, and an LLM router — on one contract you own.
We're the glue, not the metal. Each service is a capability contract — a durable promise (the Postgres wire, the S3 API, OIDC) — bound today to a best-in-class backend. The contract is yours; the backend is swappable. No single giant owns your stack, and neither do we.
Hosted sign-in, social + passwordless, organizations and roles. The same gate that protects this estate's own admin tools.
A real, managed Postgres database — branches, autoscale, point-in-time. Plain SQL; tenant-isolated by tenant_id + row-level security.
pg_dump. No proprietary query layer.Store files, media, backups against the S3 API you already know. Tenant-scoped by key prefix; egress-friendly.
Deploy a service or site from a repo. Health checks, rollbacks, env management — GitOps from the same repo that is your source of truth.
Cookieless, GDPR/POPIA-friendly product analytics. A tenant dimension on every event; no surveillance, no ad-tech resale.
Address models by role (“the cheap summarizer”, “the frontier reasoner”), not by vendor slug. Per-tenant usage metering. A PII firewall can tokenize sensitive data before it ever reaches a model.
A self-hostable Git + artifact store so your repo — the source of truth — lives inside your sovereign home, not only on a third-party platform.
On the way into a model: classify + tokenize/redact sensitive data. On the way out: rehydrate for your tenant only. The brain stays blind. How it works →
Every service above is a capability contract first, a vendor second. That single design choice is the whole pitch: