A complete backend you set up by describing your data
Create an endpoint with a list of fields and you have a full REST API, private to its owner by default. Around it you get everything else an application needs, without assembling services from different vendors.
Data and APIs
A complete API in one call. Access rules come with it.
Endpoints from fields
Describe your fields, from text to references and JSON, and get a full REST API with indexed queries.
Powerful queries
Filters, sorting, expanded references, full-text, semantic and natural-language search, aggregation and GraphQL.
History built in
Revisions, snapshots, a trash can, retention rules, a field-level audit trail and time-travel queries.
Branches and sandboxes
Try changes on a copy of your data, and run transactions across several endpoints.
Integrations
Signed webhooks with replay, change streams, ERP sync, MQTT and OPC-UA for machines, and message queues.
OpenAPI and SDKs
Every API is described in OpenAPI 3.1, with generated SDKs.
# Create an endpoint. You now have a REST API.
POST /api/endpoints
{ "name": "work_orders",
"fields": [ { "name": "title", "type": "string", "required": true },
{ "name": "status", "type": "string" },
{ "name": "due_at", "type": "datetime" },
{ "name": "customer_id", "type": "uuid", "reference": "customers" } ] }
# Use it straight away.
POST /api/data/work_orders { "title": "Service pump PH-125", "status": "open" }
GET /api/data/work_orders?status=open&_sort=due_at&_expand=customer_id
Identity and security
Every record belongs to someone. Sharing is explicit.
Sign-in
Email and password, two-factor, rotating tokens, app tokens and Google, Apple, Microsoft and GitHub login.
Single sign-on
Run your own OAuth 2.0 and OpenID Connect server, or let your apps sign in with Vault56.
Fine-grained access
Row-level security, roles, field permissions, masking and limits by IP address or country.
AES-256 encryption
Records, files, email and synced data can be encrypted with AES-256, the standard governments use for classified information. Encrypt the most sensitive fields on your own device, so only you hold the key.
Bot protection
Vault56 Shield stops abuse without sending your visitors to a third party.
Compliance
GDPR requests, consent records, signed records and evidence for SOC 2, HIPAA and ISO 27001.
Files, email and real time
The services every business app ends up needing.
File areas
S3-backed storage with write-once locking, mirroring, resumable uploads, previews, OCR and PDF generation.
Vault56 Drive
Files appear on Windows, macOS, Linux, Android and iOS and download only when opened.
IMAP and SMTP with Gmail and Outlook sign-in, shared inboxes, rules, sequences and CalDAV and CardDAV.
Real time
Server-sent events, WebSockets, presence and locks, messaging and relays for video calls.
Push notifications
Reach phones and browsers with Android, iOS and web push.
Forms and portals
Public forms, data rooms and portals built on the same data.
Build, automate and sell
Go from an idea to a paid app on the same platform.
Studio
Describe the app or website you want and Vault56 AI builds it. You pay as you go.
Functions
Run your own WebAssembly code on a schedule, on data changes or from webhooks, with limits you set.
Workflows
State machines, multi-step approvals with signatures, rules across records and scheduled reports.
Marketplace
Publish apps publicly or only to your own organisation, with pricing tiers, trials and add-ons.
Billing
Invoices, EU VAT reverse charge, vouchers and payouts to app publishers.
Release manager
Ship signed updates to your own apps, agents and devices, with staged rollouts.
Products built on the platform
Everything we ship runs on the same services you get.
- Data and APIs
- Accounts and sign-in
- File storage
- Realtime and push
- Workflows and automation
- Functions
- AI
- Agents and devices
- Signed updates
- Marketplace and billing
Point at a product to see which platform services it uses.
Built in Sweden. Hosted in the EU. Encrypted.
Vault56 is developed in Sweden and runs in European data centres. The core platform does not depend on any non-EU cloud provider, so your data stays under EU law. It can be encrypted with AES-256, the standard governments use for classified information.
Start with a free account
Try the platform today. The products open to everyone on 11 October 2026.