TinyCloud provides a sovereign personal backend that lets users own their data and run AI privately through encrypted storage and decentralized identity. The platform uses passkey authentication and cryptographic UCAN delegations to give apps scoped, time-bounded access without exposing plaintext data. It targets developers and organizations building user-centric applications who require a minimal-code integration path, with a developer SDK reducing setup to roughly five lines of code.
Funding
Funding not disclosed
Founders
Product
Problem
Individuals, organizations, and AI agents increasingly depend on centralized platforms that control access to their data, creating a power imbalance where users cannot fully own or govern their digital assets. Existing solutions either require technical expertise to manage self-hosted infrastructure or force users onto corporate services that can access, exploit, or lock in their information.
Solution
TinyCloud offers a sovereign personal backend that gives users complete ownership of their data while enabling private AI computation through hardware enclaves. The platform uses passkey sign-in via OpenKey to establish decentralized identities (DIDs), and UCAN-based delegations allow apps to request scoped, time-bounded permissions that remain cryptographically verifiable and revocable. Data is processed inside Trusted Execution Environments (TEEs), where AI models run on plaintext only within the secure enclave, ensuring results are verified without exposing the underlying information. Developers integrate the service with a web SDK, which manages authentication, storage, and permission rules, and the infrastructure handles the rest, presenting users with a seamless passkey prompt and instant encrypted storage experience.
Target Audience
Primary customers are developers and organizations building applications where user data ownership and privacy are critical, including individual developers, startups, and enterprises seeking to embed sovereign storage and private AI capabilities into their products.
Features
- Web SDK and TypeScript support that enables integration in approximately five lines of code, defining app name, hosts, and sign-in flow.</>
- Passkey-based authentication with OpenKey, storing identity in hardware enclaves without seed phrases or browser extensions.</>
- Capability-based access control with UCAN delegations granting scoped, time-bounded, and revocable permissions to apps and agents.</>
- Confidential computing infrastructure using TEE hardware enclaves, enabling AI to compute on data without exposing plaintext to the platform.
- User-owned encrypted storage spaces, with data protected end-to-end and accessible only via cryptographic delegation.
- Support for both Web and mobile platforms (iOS, Android, Web) through a unified SDK, with the system designed for individual users and AI agents.