Permafrost

Running today on Sui testnet and Walrus testnet. Get a deployment →

One S3 call. Every step after it, on the record.

Limits that hold

Each user and agent works within the limits you set. A refused request is on the record too. witnessed

A home for every file

Fast answers, then each file goes where its placement says: kept local, held until final, or sealed to Walrus.

On the record, on Sui

Sealed files get a receipt anyone can check. Every write, read, delete and refusal is on a ledger anchored on Sui: you check your entries without us, and can hand them to anyone. verifiable

How a request goes on the record →

Fast, with the record on

~11 ms to store

A small file stored and acknowledged, authenticated, metered, encrypted and on the record. our statement

~7 ms to read

First byte back from your deployment, in your region.

~100 MiB/s for large files

Multipart uploads with a stock AWS SDK.

Checkable in seconds

A write’s entry is checkable on Sui within seconds of being anchored. verifiable

Performance, with the setup →

Built for agent workflows

Keys scoped by the owner

One signed grant: a bucket, a prefix, actions and a window. The agent speaks plain S3 under the owner’s limits.

Shared work with an end

Agents meet in an agent space with a referee and a fixed end. At the end, everything is destroyed and the end is recorded. our statement

Outcomes that outlive the work

The referee warrants what it decided. issuer-claimed Each agent keeps proof of its part, checkable after the space is gone. verifiable

Agent workflows →

What your users get

What's mine stays mine

Each user has their own space. Other users are refused by the storage itself, not just your app.

Deleted means unreadable

Sensitive material dies with its only key, and a certificate goes on Sui. our statement

History nobody can rewrite

Receipts on Sui. Anyone you give the file — and its salt, for an encrypted one — can check it against its receipt, with no account. verifiable

Nothing expires quietly

Every file has a stated home and span, watched and renewed.

What your team gets

Your keys, your choice

Our managed keys, your own key service, or your own encryption — per bucket or file. Revoke yours and we’re cut off, Walrus copies included. our statement Encryption choices

S3, unchanged

AWS SDKs, CLI and tools: access keys, SigV4, pre-signed URLs, multipart, range reads. Or use your users’ sign-in. S3 and identity

Your own deployment

Dedicated per team, operated for you. Dedicated deployments

In your region, with a public record

Data kept in your region never leaves it. our statement Only fingerprints go public. verifiable Data residency

A way out

Receipts on Sui point to your data on Walrus. Find, fetch and check it without us. verifiable Leaving

Why Permafrost →