The confidential backend

Your app's whole backend, like Firebase. Except nobody can read your data, not even us.

Auth, database, functions, realtime, storage and hosting in one deploy, running in hardware your users can verify.

Same dataWhat we can see
The same customer records seen by an operator: readable on a usual cloud server, redacted on a sealed Calimero node On a usual cloud server, an admin can read every record: emails, amounts, files. On a sealed Calimero node the same records are unreadable to everyone, including Calimero; the operator sees only health, CPU and memory. USUAL CLOUD SERVER CALIMERO · SEALED NODE alice@acme.com $12,400 bob@acme.com $8,950 payroll-q3.csv 214 KB contract.pdf signed ✗ ADMINS CAN READ IT ALL ✓ NOBODY CAN, INCLUDING US what an operator sees health ✓ · cpu 23% · mem 41%

Backed by

  • Khosla Ventures
  • NEAR
  • GSR Ventures
  • FJ Labs
  • Eniac
  • Hypersphere
  • Lyrik
  • Daedalus
  • Warburg Serres
  • Metaweb Ventures

01 · The backend

Everything a backend needs, sealed.

Each piece runs inside the same attested nodes as your app, ships in the same signed package and goes live in the same deploy. There is no second service to trust with your data.

  • Auth

    Passkeys and keys

    Passkey sign-in for people, sessions, and scoped API keys for machines and agents.

    How keys are checked
  • Database

    Replicated app state

    Maps, sets, tables with indexes and rich text, replicated across attested nodes.

    Confidential Database
  • Functions

    Your code, sealed

    App methods written in Rust, plus compute jobs, timers and pipelines.

    Confidential Functions
  • Realtime

    Live events

    Live events and presence for everyone using your app.

    Event Bus
  • Storage

    Files and blobs

    Sealed file and blob storage beside your app's state.

  • Search

    Full-text search

    Full-text search over your app's data, without the data leaving the sealed nodes.

    Search & Retrieval
  • Hosting

    Your frontend, verified

    Your frontend is signed with the app and served from the same verified nodes.

    How it works
  • Typed clients

    Generated from your app

    TypeScript, Python, Swift and Kotlin clients generated from your app.

    Developers

02 · Verify us

Don't trust us. Verify us.

Every call to a Calimero app goes through the same three steps, so the proof doesn't depend on who runs the machines, including us.

  1. 01

    Verify.

    Every client checks the node's hardware attestation against a signed release before it sends a byte, then talks to it over a sealed channel to a key the hardware vouches for.

  2. 02

    Enforce.

    Disk keys are released only to nodes whose attestation matches the signed, read-only image: no SSH, no rescue shell. Inside, only the approved code touches your data.

  3. 03

    Prove.

    Every answer comes with a receipt signed by an attested key, so you, an auditor or a regulator can check it offline, at any time.

04 · Build

Write it in Rust, ship it in one package.

You write the app's state and methods. Replication, auth, storage and the sealed channel come with the platform.

  1. Write your app's state and methods in Rust with calimero-sdk.
  2. Build it with mero-app-build, and try it on a three-node dev cluster with merod local.
  3. Deploy one signed package, logic and frontend together, to Calimero Cloud.
apps/kv-store/src/lib.rsView code ↗
#[app::state]
pub struct KvStore {
    items: UnorderedMap<String, LwwRegister<String>>,
}

#[app::logic]
impl KvStore {
    pub fn set(&mut self, key: String, value: String) -> app::Result<()> {
        self.items.insert(key, value.into())?;
        Ok(())
    }
}

Replicated across attested nodes. No server code.

05 · Where it runs

Run it your way.

The same signed app runs on all three. Start free on shared clusters and move when you need to.

Shared

$0 to start

Request-based, on Calimero's shared clusters. Pay for usage beyond a monthly free allowance. No monthly minimum.

  • 1M mutations and 5M views free each month
  • 180,000 vCPU-seconds and 360,000 GiB-seconds free
  • 100,000 outbound requests free
  • 1 GB of app state and 5 GB of blobs free

Then $1.00 per million mutations and $0.20 per million views.

Start free

Dedicated

$1,200/month

A cluster for your apps only, provisioned and run by Calimero. No per-request, CPU or memory fees.

  • 3 nodes: 4 vCPU, 16 GB, 100 GB disk each
  • Extra nodes $0.55 per node-hour, billed per second
  • Usage on it is not metered
Ask for a dedicated cluster

Self-hosted

Talk to us

The same attested nodes on your own Intel TDX hosts, for data that has to stay on your premises.

  • The same signed build as on Calimero Cloud
  • Clients verify your nodes before they send anything
Talk to us

Prices are in US dollars. The free allowance is per developer account. Full pricing and every meter.

06 · Open source

The runtime is open source.

The node, the SDK and the protocol are on GitHub, with a full protocol reference you could reimplement a node from.

  • GitHub stars on core
  • latest core release

Ship the backend nobody can read.

Start free on Calimero Cloud, or book a walkthrough and we'll map your app onto it.