Core data primitives for a world where everyone runs agents.

In conventional software, the application is the center of gravity. Every app creates its own database, keeps a copy of each customer’s data, decides who can access it, and becomes a long-term custodian. Every new application is another silo. Users export data only when the app permits it, and agents see only the fragments each app chooses to expose.

This model is about to collide with a new reality: people are capturing more of their lives than ever—always-on recording, meeting transcripts, health data, even brain-computer interfaces. The public has already learned the lesson of the 2010s. Consumer DNA data ended up in law enforcement hands. Note-taking apps have been caught surveilling their users.

People hesitate to adopt powerful new tools not because the tools aren’t capable, but because they don’t trust the companies behind them—and that distrust only compounds as those companies gain access to superintelligent AI.

TinyCloud inverts the relationship between data and software. Each user or organization has a sovereign data environment made up of cryptographically controlled spaces. Applications, collaborators, and agents receive narrowly scoped authority to operate on specific resources for specific purposes. The owner can grant, limit, delegate, and revoke that authority—without ever transferring ownership of the underlying data.

The central promise is not private storage. It is a new relationship between data and software:

Store data once under its owner’s authority, then let many applications and agents use it through explicit, inspectable permissions.

The three-tier value stack

1. 01

   Sovereign data protocol

   Identity-rooted spaces, storage, cryptographic authorization, delegation, and invocation. A dependable substrate on which data stays portable, addressable, and owner-controlled.

2. 02

   Intelligence and enablement layer

   Connects, organizes, governs, and interprets sovereign data. Turns raw sovereign storage into useful context and makes the protocol practical to build on and operate.

3. 03

   Applications and outcomes

   Personal, organizational, and market-specific products built on sovereign data. Useful software that never requires people to surrender their data to each application.

TinyCloud makes the strongest trust guarantees currently practical: local-first wherever possible, and cryptographically verifiable attestation where a cloud component is needed. No “trust me” terms and conditions—the architecture prevents even TinyCloud from extracting value from its users’ data.

And no speculative dependencies: we deliberately avoid unwieldy primitives (ZK proofs, fully homomorphic encryption) that aren’t production-ready, and we carry none of Web3’s baggage. Users get the properties of decentralized identity without a token, a blockchain, or new cognitive load.

TinyCloud can be self-hosted, embedded, or run as a managed service. Managed TinyCloud is the commercial, operated form of the system: TinyCloud runs the infrastructure and operational services while preserving the same owner-rooted authority model.

In practice, it’s a drop-in backend—think Supabase—that gives developers compliant, simple, robust customer data management with sovereignty built in.

The developers we talk to share the same concern: they want to build their product, not become custodians of sensitive customer data. Many have great ideas but no scalable answer to this problem. TinyCloud removes it from their plate entirely, so they can keep working at the level of abstraction they care about while inheriting privacy, compliance, and user control by default.

We serve three segments: consumers building personal apps, businesses building internal tools, and developers building outward-facing products—the last being our highest-leverage channel, since every developer we empower carries these guarantees to their entire user base.