Start on Cloud

Home / Products

Calimero Cloud

Sealed nodes, run for you.

Calimero Cloud runs your app on Intel TDX confidential VMs and keeps it online. Nodes prove which image they run before they get any keys, and nobody, including us, can read data inside a sealed node.

Start on Calimero Cloud Sign in
cloud.calimero.network
  • 0servers for you to provision or patch
  • 5checks before a node gets a key
  • 4views in one console: apps, machines, accounts, overview
  • 3sealed machines per app on Premium

02 · What you get

Everything it takes to keep a sealed app online.

We run the nodes and their upgrades. You keep the app, the data and the proof.

  • 01

    Always on

    Your app stays online on managed nodes, so your users never wait for a device to wake up.

  • 02

    See what runs

    Every node serving your app, and the measurements it attested, in one console.

  • 03

    Bring your own servers

    Join your servers to the same app. Cloud nodes and yours stay in sync.

  • 04

    Install from the console

    Upload a signed bundle and it goes to your nodes. No servers to prepare.

03 · The console

One console. Every node, every proof.

Try the tabs: demo data, laid out like the real console.

cloud.calimero.network
ada@example.comProduction
Overviewdemo data
Apps2all healthy
Machines43 attested · 1 yours
Accounts31 owner · 2 members
AppVersionNodesHealth
my-app1.4.0 · signed4 servingin sync
team-notes0.9.2 · signed2 servingin sync

Nothing needs attention. Every app has an attested node serving it.

04 · How it works

From sign-in to live.

  1. Sign in

    Open the console at cloud.calimero.network.

  2. Install your bundle

    Upload the signed bundle you built with cargo mero bundle.

  3. Node attests, gets keys

    A sealed node proves which image it runs. Only then are its keys released.

  4. Live

    Your app is served from a sealed node and stays online.

Start on Calimero Cloud Build a bundle first

05 · Verify

Don't trust us. Verify us.

Production images are read-only and have no SSH. Before a node gets any keys, it proves which image it booted.

  • Read-only images with no SSH, console or rescue shell.
  • Keys only after the quote matches the signed release.
  • Open-source verifier so anyone can check a node.
The five checksShow less

  1. Signed release

    Measurements published

  2. Node boots

    Intel TDX, read-only image

  3. Node proves

    Hardware attestation quote

  4. Key service

    Checks it against release policy

  5. Keys released

    Data unlocked inside the node

A node that fails any step never gets keys. Anyone can check step 3 with the open-source verifier.

Verify a node The full trail

06 · Cloud and your servers

Your servers can join too.

Some customers need their data on premises. Run nodes on your own servers and join them to the same app as your Cloud nodes.

  • Calimero Cloud: sealed, attested nodes, run by us.
  • Your servers: nodes on your own infrastructure.
  • One app: both join it and stay in sync.

Read how to run a node

Calimero Cloud

Fully managed nodes on Intel TDX confidential VMs. Sealed, attested, run by us.

Your servers

Nodes you run on your own infrastructure, in the same app.

Both, connected

One build serves SaaS and on-prem customers.

07 · Pricing

Start free. Pay for always on.

Every plan is private. You pay for the sealed machines that keep your apps online.

Free

$0

Your own nodes, plus always-on apps you're invited to.

  • 5 namespaces
  • 1 GB storage
Start free

Basic

$20/month

Ten apps that never sleep.

  • 10 always-on namespaces
  • 10 GB storage
  • One sealed machine each
Start on Calimero Cloud

Premium

$200/month

Everything always on, with more machines behind it.

  • Unlimited always-on namespaces
  • 100 GB storage
  • Three sealed machines each
Choose Premium

Enterprise

Contact us

Beyond Premium, on your terms.

  • Dedicated capacity
  • Agreed service levels
Contact sales
What counts as a namespaceShow less

A namespace is an app's own private space: its data, its people and its rules. Always-on namespaces are kept online by sealed Calimero Cloud machines, so your users never wait for a device to wake up. Plans are monthly and you can cancel any time.

08 · Questions

Before you sign in.

Can Calimero read my data?

No. Nobody, including us, can read data inside a sealed node, and you can verify which image a node runs before it gets any keys.

Can I cancel?

Yes. Plans are monthly, and you can cancel any time.

Where do nodes run?

Calimero Cloud nodes run in Intel TDX confidential VMs with hardware attestation.

Can I run my own servers too?

Yes. Your servers join the same app as your Cloud nodes and stay in sync.

What languages can I build in?

App logic is written in Rust. Client SDKs for JavaScript, Python, Swift and Kotlin connect your frontend to it.

Your customers want control. You want to ship.

Start on Calimero Cloud, or build on the open-source runtime.

Start on Calimero Cloud Talk to us View on GitHub