Use case: the mover — when someone changes teams, access should follow
A mover request adjusts what a person can reach as a tracked change, so access matches the role, not the history.
Use case: the rollout that cannot take the fleet down
A security baseline change across a laptop fleet, pilot ring first, drift flagged before the broad push.
Use case: verify customers without becoming a document store
A fintech onboarding flow where documents never leave their region and every decision has a reason code.
Workplace: device management that goes pilot-first
One stable inventory, rollout rings that catch bad change early, and admin rights that expire on their own.
Verify: customer verification with consent and evidence built in
Guided journeys where no check runs without consent, documents stay in their region, and every outcome explains itself.
Lifecycle: day-one access, day-zero offboarding
Joiners, movers and leavers as governed requests — approvals in order, execution automatic, evidence built in.
Backups: a copy the same outage cannot take
Retention tiers as policy, an explicit cross-provider copy, and restores from a recorded source.
Networking: write the firewall rule once
One rule model translated to every provider, load balancers that health-check, and DNS that fails over.
Managed databases: eight engines, one resource model
Postgres to Kafka behind one set of verbs — backup, failover and upgrades you learn once.
Block storage: volumes that attach, resize and snapshot safely
The safe orderings are enforced by the platform, and every restore names its source.
Object storage your tools already speak
S3-compatible buckets behind one endpoint, keys scoped to your principals, and sharing that never hands out a key.
Kubernetes: managed clusters, and no static tokens to leak
A kubeconfig minted from your identity, bound to you, expiring on its own — and upgrades you can roll back exactly.
Servers: a VPS in minutes, dedicated hardware through the same door
One lifecycle and one API for virtual and dedicated servers, with the price on the page before you order.
On the roadmap: scheduled reports, deeper FinOps, and more
A candid note on what we are building next and what we deliberately are not.
Getting started: your first workload in ten minutes
Create a tenant, invite your team, order a server and load some data — the short path.
How a screenshot test keeps the UI honest
The gallery photographs every component, so a restyle that breaks a control fails CI instead of a demo.
Rate cards, currencies and bank accounts, worldwide
A receiving account per currency, a country-to-currency map, and FX-drift warnings on the credit price.
Choose how you hear about each kind of alert
Instant, a daily digest, or off — per category, with your verification email never gated.
Self-service signup, with fraud screening that is not a CAPTCHA
Proof-of-work to shed bots, a risk score to catch fraud, and a conservative onboarding tier to start on.
Fabrikam’s month-end went from a week to an afternoon
A composite story about showback that reconciles, so finance and engineering stop arguing.
How Northwind retired four tools in a quarter
A composite customer story: one platform replacing an identity provider, a lakehouse, a VMS and a cloud console.
Metering that bills once, even when the bus delivers twice
Idempotency keys on every meter event, because a durable queue that replays is normal, and double-billing is not.
The one rule we never break: a single policy decision point
No service computes its own authorization answer. Here is why that discipline is worth the inconvenience.
Why colour is never the only signal in our charts
Okabe–Ito hues, dash patterns, markers and direct labels — so a chart reads to a colour-blind reader too.
Release notes: Q2 2026
Saved questions on the Ask plane, catalog authoring in Data OS, and a staff role catalog.
Release notes: Q3 2026
Line and area charts across dashboards, an in-console API reference, and service health inside the console.
DPIA records and sealed evidence packs for an audit window
Compliance reporting that bundles the chain verdict, the reports and the legal holds, sealed with a digest.
An audit chain the customer can verify
Hash-linked events, a verdict on every page, and an export your auditor can check independently.
Webhooks with replay, over a typed event catalog
Subscribe to the events the platform emits, verify them by signature, and replay a failed delivery.
Set up SSO yourself, with SCIM both ways
OIDC, SAML, Entra, Okta, Google or Ping — configured by your admin, no ticket to us.
Break-glass access that is a control, not a backdoor
Emergency access granted immediately and reviewed afterwards — because break-glass nobody reviews is standing access with a dramatic name.
Data residency that the platform actually enforces
Pin a workspace to a jurisdiction and the policy decision point refuses to place it elsewhere.
Platform Credits: one unit for everything you use
How credits are rated, where they are spent, and how a forecast warns you before the limit.
One invoice across identity, data, video and cloud
Four pillars, one meter envelope, one price book, one total you can trace to the row.
Agent runtime: guardrails, budgets and a kill switch on the hot path
An agent is a principal with an allow-list, a blast radius and a budget — and a stop that takes seconds.
Workflows where every action authorizes as the triggering principal
Automation that cannot do more than the person who triggered it.
Searching footage in plain words, with who-looked recorded
Every search of a person’s image is itself audited, because looking is an act.
See what a query will scan before you run it
The SQL editor estimates bytes scanned and cost up front, so a cartesian join is a warning, not a bill.
Data OS: a governed lakehouse with the policy baked in
SQL, warehouses and pipelines where column-level policy travels with the query.
Offboarding a leaver in one sweep across five pillars
Nobody can enumerate what one person can reach by hand. So we made it one button, with a second pair of eyes.
Every resource is a URN, and every decision goes through one PDP
One grammar for identity across five pillars, and why that makes audits boring.
How Ask answers a question across every pillar
The query planner that joins identity, data, video and cloud — and shows its working.
One platform: identity, data, video, cloud and operational intelligence
Why we built a single control plane instead of five products that integrate on a good day.