OpsLayer
A control plane that cannot read your data.
Tenant data is encrypted before it reaches any persistent storage, under keys the provider does not hold. That extends to the shape of it — not the records, not the files, not even the entity and field names.
Encrypted before storage
Records, files and schema are sealed under a per-tenancy key hierarchy. The provider operates the platform without being able to read what is on it.
Access only by grant
A provider user sees a tenancy only where that tenancy has issued a grant — which makes them a user in it: scoped, recorded in the tenancy’s own audit log, and revocable by the tenant at any time.
Extended by conversation
Tenants shape their tenancy through an LLM over MCP rather than by writing code, and publish their own pages and custom domains from it.