Home / Products / Store data

Confidential Database

A backend even the provider can't read.

A document and row store with access rules checked inside the enclave. Clients read through views, never raw storage, and the cluster proves which code enforces the rules.

Store data · Works with Data Vault & Tokenization, Search & Retrieval, Programmable KMS & Signing · Same meters as every product

02 · Use case

SaaS your enterprise customers can verify

Who it's for: SaaS vendors selling to enterprises.

Today

Enterprise buyers ask a SaaS vendor who can read their data. The honest answer is usually the vendor's engineers and cloud provider, and security reviews stall on it.

With Confidential Database

The product's data lives in the Confidential Database. Access rules are enforced inside attested nodes on every read, clients read through views, and the cluster proves which code enforces the rules, so the vendor can show customers it has no way in.

What you get

  • A verifiable answer to "can you read our data?"
  • Field-level rules enforced inside the enclave
  • A stronger position in every security review

03 · How it works

Four steps, all inside attested nodes.

  1. 01 · Model

    Define documents, views and who may read each field.

  2. 02 · Write

    Data goes in over a sealed channel and is sealed at rest.

  3. 03 · Enforce

    Rules are checked inside the node on every read.

  4. 04 · Prove

    The cluster attests which code enforces the rules.

04 · Built in

What it inherits from the engine.

Confidential Database runs on the same confidential engine as every Calimero product, so it comes with the same proof.

  • Attested hardware. Clients verify the node's image before sending anything.
  • Sealed end to end. Nobody, including us, can read data inside a sealed node.
  • Signed receipts. Every answer can be checked offline, later, by anyone.

See Confidential Database running on attested hardware.

Book a technical walkthrough and we'll map your data flow, or start free on Calimero Cloud.