Platform products
Servers, Kubernetes, storage, databases, networking, backups, Lifecycle, Verify, Workplace, Lakehouse, SQL & Analytics and ML & GenAI — each priced at a published rate and added to one monthly invoice.
Virtual and dedicated servers from one catalog.
Launch a VPS in minutes or order dedicated hardware, both through the same lifecycle and the same API. Choose an image, template the first boot, and get the whole order-to-running record audited — on capacity we run and partner capacity we contract.
Managed clusters that name no upstream.
A cluster is one resource carrying its control plane and its node pools. Run it managed on whichever upstream serves the region or self-managed on our own metal — your kubeconfig points at the same endpoint either way, and access is minted from your identity rather than a static token.
S3-compatible buckets behind one endpoint.
Buckets with versioning and lifecycle rules, reached through a unified S3 endpoint that names no provider. Access is a key scoped to one of your principals, and a presigned URL is exactly as powerful as the key that signed it.
Volumes that attach, resize and snapshot.
Network block volumes for your servers — create, attach, detach and resize through one resource, with snapshots you can restore from. Shared file storage is a different resource, kept deliberately apart.
One resource for every engine you run.
PostgreSQL, MySQL, MariaDB, Redis, Valkey, MongoDB, ClickHouse and Kafka, each a value of one managed database resource — so backup, upgrade and failover reach every engine without a per-engine surface. Point an application at an endpoint that names no upstream.
Private networks, load balancers and DNS, one rule model.
Private networks with subnets and routes, firewalls written once and translated to whatever each provider calls them, load balancers that health-check their backends, and DNS with health-checked failover and GeoDNS — all addressed through endpoints that name no upstream.
Retention tiers and cross-provider copies.
Backup policies with retention tiers and the option to copy a backup to a second provider — because a backup that lives only where the thing it protects lives is no backup when that place is the outage. Off by default where it doubles cost, on by an explicit choice.
Day-one access. Day-zero offboarding.
Joiners, movers and leavers handled as governed requests: role profiles decide what a person gets, approvals happen in order, and every step is executed, recorded and evidenced — so offboarding is one approval and a revocation record, not a week of tickets.
Customer verification with consent, review and evidence.
Identity verification as a guided journey: applicants, consent capture, provider-neutral checks and dual-controlled review, with an evidence trail you can put in front of an auditor.
Every device managed. Every rollout pilot-first. No standing admin.
Every managed device in one inventory, rollouts that go pilot-first, and temporary admin rights that expire on their own — device management with the controls your security team would ask for.
Open Iceberg tables you can always take with you.
Tables in the open Apache Iceberg format on S3-compatible storage, with ACID writes, snapshots, time travel and schema evolution — catalogued, classified and governed by the same policy engine as everything else, and readable by any engine that speaks Iceberg.
SQL warehouses, dashboards and a query history you can trust.
Interactive SQL on Trino over your governed tables and federated sources, from warehouses that scale to zero and bill by the second. Preview what a query will scan before it runs, chart the answer on a dashboard, and find every statement again in a history with its plan.
Models you can trace, and AI that reads only what it may.
Experiments, a model registry and serving, with promotion gated on a model card and an approval and every version traced to the snapshot it trained on. For generative AI: corpora, embeddings and a per-tenant vector index, with retrieval filtered by the person asking.
Search every camera in a sentence, and hear about it next time.
Type what you are looking for in plain English. The platform reads it into objects, colours, places and times, searches only the footage your role may see, and shows why each result matched. Save the search, schedule it, or turn it into a standing alert that pages the right channel.
Cases with evidence that holds up, and a record of everyone who looked.
Open a case from an alert, a search result or by hand. Attach clips, frames, notes and records from identity, access and cloud, keep the footage under legal hold, and export a tamper-evident package. Every view, export and search is written to an audit a tenant administrator cannot switch off.
Ask one question across every system, and see how it was answered.
Ask in plain English and get one answer drawn from footage, badge logs, sign-ins, servers and spend. Each answer shows how the question was read, which systems it asked, the queries it ran and what policy left out. The engine has no access of its own: it reads only what the person asking may read.
Automate the response, and keep every step accountable.
Workflows react to a video alert, a risky sign-in, a cloud anomaly, a data condition, a schedule or a webhook, and act across the platform: notify, open a case or a ticket, run SQL or a pipeline, revoke access, lock a door. Agents do the same under their own identity and budget. Every action is authorized as whoever started it, can be simulated first, and is recorded.
Run an application
Store and share data
Run a database
Connect and protect it all
Give employees access — and take it away
Verify who your customers are
Manage the company’s devices
Keep data open and governed
Query and chart it
Train, serve and ground AI
Find anything on camera, and be told next time
Investigate an incident with evidence that holds up
Ask a question that spans every system
Automate the response, with a person in the loop