A complete backend you set up by describing your data

Create an endpoint with a list of fields and you have a full REST API, private to its owner by default. Around it you get everything else an application needs, without assembling services from different vendors.

vault56 AI Studio after building a tool-room booking app: three new data collections in the chat and the working app in the preview

Data and APIs

A complete API in one call. Access rules come with it.

Endpoints from fields

Describe your fields, from text to references and JSON, and get a full REST API with indexed queries.

Powerful queries

Filters, sorting, expanded references, full-text, semantic and natural-language search, aggregation and GraphQL.

History built in

Revisions, snapshots, a trash can, retention rules, a field-level audit trail and time-travel queries.

Branches and sandboxes

Try changes on a copy of your data, and run transactions across several endpoints.

Integrations

Signed webhooks with replay, change streams, ERP sync, MQTT and OPC-UA for machines, and message queues.

OpenAPI and SDKs

Every API is described in OpenAPI 3.1, with generated SDKs.

# Create an endpoint. You now have a REST API.
POST /api/endpoints
{ "name": "work_orders",
  "fields": [ { "name": "title",       "type": "string", "required": true },
              { "name": "status",      "type": "string" },
              { "name": "due_at",      "type": "datetime" },
              { "name": "customer_id", "type": "uuid", "reference": "customers" } ] }

# Use it straight away.
POST /api/data/work_orders   { "title": "Service pump PH-125", "status": "open" }
GET  /api/data/work_orders?status=open&_sort=due_at&_expand=customer_id

Identity and security

Every record belongs to someone. Sharing is explicit.

Sign-in

Email and password, two-factor, rotating tokens, app tokens and Google, Apple, Microsoft and GitHub login.

Single sign-on

Run your own OAuth 2.0 and OpenID Connect server, or let your apps sign in with vault56.

Fine-grained access

Row-level security, roles, field permissions, masking and limits by IP address or country.

AES-256 encryption

Records, files, email and synced data can be encrypted with AES-256, the standard governments use for classified information. Encrypt the most sensitive fields on your own device, so only you hold the key.

Bot protection

vault56 Shield stops abuse without sending your visitors to a third party.

Compliance

GDPR requests, consent records, signed records and evidence for SOC 2, HIPAA and ISO 27001.

Files, email and real time

The services every business app ends up needing.

File areas

S3-backed storage with write-once locking, mirroring, resumable uploads, previews, OCR and PDF generation.

vault56 Drive

Files appear on Windows, macOS, Linux, Android and iOS and download only when opened.

Email

IMAP and SMTP with Gmail and Outlook sign-in, shared inboxes, rules, sequences and CalDAV and CardDAV.

Real time

Server-sent events, WebSockets, presence and locks, messaging and relays for video calls.

Push notifications

Reach phones and browsers with Android, iOS and web push.

Forms and portals

Public forms, data rooms and portals built on the same data.

Build, automate and sell

Go from an idea to a paid app on the same platform.

Studio

Describe the app or website you want and vault56 AI builds it. You pay as you go.

Functions

Run your own WebAssembly code on a schedule, on data changes or from webhooks, with limits you set.

Workflows

State machines, multi-step approvals with signatures, rules across records and scheduled reports.

Marketplace

Publish apps publicly or only to your own organisation, with pricing tiers, trials and add-ons.

Billing

Invoices, EU VAT reverse charge, vouchers and payouts to app publishers.

Release manager

Ship signed updates to your own apps, agents and devices, with staged rollouts.

Built into the platform

Tools that come with every account, ready to use without writing code.

Visual endpoint builder

Design your data by pointing and clicking. Add fields, choose their types and rules, and link endpoints to each other. The API is ready the moment you save.

  • Text, numbers, dates, references, JSON and translatable fields
  • Required, unique and default values per field
  • Relationships between endpoints, drawn as a diagram
  • Browse, import and export the records
The vault56 visual endpoint builder with an endpoint and its fields

Visual form builder

Build public forms that write straight into an endpoint, or into a review queue you approve first. Share them with a link or embed them in your own site.

  • Your colours, logo, fonts and dark mode
  • Create records directly or after review
  • Built-in spam protection and rate limits
  • Submission limits and closing dates
The vault56 visual form builder designing a public form

File areas

Share files with customers and partners from a branded space with its own address, stored on Titan in the EU.

  • Internal, or public with a link, a secret code or a time-limited link
  • Let visitors upload, or only download
  • See every download
  • Versions, previews and write-once locking
A vault56 file area with folders and files

Web analytics

Privacy-first visitor statistics for your websites, without sending your visitors to a third party.

  • A tracking script of about 2.5 KB
  • Visitors, page views, sessions, bounce rate and time on site
  • Top pages, referrers, devices, countries and campaigns
  • IP anonymisation, Do Not Track and consent modes
  • Conversion events and alerts
The vault56 web analytics dashboard for a website

vault56 Shield

Invisible bot protection for sign-up and password recovery. Real people never see a puzzle, and nothing is sent to a third party.

  • Scores behaviour and request patterns
  • Hidden honeypot fields catch simple bots
  • A small proof-of-work makes attacks at scale expensive
  • Signed, short-lived tokens stop replayed forms
vault56 Shield protection settings and blocked attempts

Products built on the platform

Everything we ship runs on the same services you get.

vault56 platformEvery product above runs on these services
  • Data and APIs
  • Accounts and sign-in
  • File storage
  • Email
  • Realtime and push
  • Workflows and automation
  • Functions
  • AI
  • Agents and devices
  • Signed updates
  • Marketplace and billing

Point at a product to see which platform services it uses.

Built in Sweden. Hosted in the EU. Encrypted.

vault56 is developed in Sweden and runs in European data centres. The core platform does not depend on any non-EU cloud provider, so your data stays under EU law. It can be encrypted with AES-256, the standard governments use for classified information.

Made in SwedenWhere the team and the engineering are
EU hostingEvery product runs in EU data centres
No US cloudNo non-EU provider in the core platform
AES-256 encryptionFor records, files, email and synced data

Start with a free account

Every product runs on the same account. Start free and add what you need.