Everything the platform ships.
More than 400 production HTTP endpoints across six client surfaces, fourteen provider plugins, and a sovereign on-prem GPU embedding subsystem. Here's the inventory.
SkyeBucket
S3-compatible API at s3.skyeconnex.com. SigV4, path-style addressing. Compatible with Cyberduck, boto3, awscli, rclone, Veeam, AWS Backup. Per-bucket region honoured in SigV4 authorisation. Multipart over the stream pipeline. UMK versioning on writes.
Explore SkyeBucket →SkyeGXU
Sovereign on-prem AI. ASP.NET Core coordinator + WPF agent running ONNX models on customer GPUs via DirectML. OpenAI-compatible /v1/embeddings and /v1/search. all-MiniLM-L6-v2, Phi-mini, BGE.
Explore SkyeGXU →SkyeMap
Real-time sovereignty visualisation. Account, per-folder, per-file score with confidence-graded endpoint pins (probed, declared, observed, country-only). 11 jurisdictional frameworks tracked.
Explore SkyeMap →SkyeFlow
Customer-facing data-flow visualisation. Mermaid LR-graph topology, detailed upload/download pipeline diagrams with frame-, shard-, and provider-level annotation. CSR variant for private deployments.
Explore SkyeFlow →SkyeDATA
Encrypted backup pipeline targeting the multi-cloud RAID substrate. Scheduled or one-shot, chunk-level SHA-256 validated. Veeam, AWS Backup, Bacula retargetable.
Explore SkyeDATA →SkyeVault
Encrypted secret storage for passwords, API keys, and notes. Available on every tier — including Free.
Explore SkyeVault →Every interface a regulated org actually uses.
Web app
Files, folders, multi-select, drag-and-drop, in-browser viewers and editors (CodeMirror, image editor, PDF viewer, OnlyOffice), file flyout with Info, Metadata, per-file SkyeMap, Versions, tag chips, folder colours.
Mobile (Flutter)
iOS, Android, web. Camera upload, share-extension, biometric unlock, bulk operations, magic-link login, per-device geofencing, resumable chunked upload persisted to local storage.
Windows Virtual Drive
SkyeXplore. Dokan-based virtual filesystem mounts SkyeConnex as a drive letter. File-Explorer-native CRUD encrypted and RAID-scattered transparently.
S3 Gateway
SkyeBucket. FastAPI service, SigV4, path-style addressing, full third-party SDK compatibility validated.
Email add-ins
Outlook (Office.js) and Gmail (Workspace Marketplace). Save attachment to SkyeConnex, insert SkyeConnex share link.
OnlyOffice / EurOffice viewer
Forked OnlyOffice integration with SkyeConnex-aware persistence. Word, Excel, PowerPoint editing in-browser with save-back through the encrypt-and-RAID pipeline.
The everyday primitives every buyer asks about first.
2FA
TOTP enrolment with recovery codes.
Passkeys (FIDO2 / WebAuthn)
Phishing-resistant, passwordless sign-in.
Session management
Active-session list with device fingerprint and remote revoke, on web and mobile.
Recovery key flow
24-character out-of-band recovery key wraps the UMK independently of password. Lose your password without losing your files.
Magic-link flows
Signed, single-use links handle activation, password reset, and email verification across web and mobile.
Duress mode
Secondary password unwraps a limited shadow scope under coercion.
Three-level hierarchy. Symmetric on read and write.
Reseller → Company → Account. The effective-policy resolver returns (value, source) tuples — every setting in the UI shows where it came from. The "View as" context-switcher lets admins act with full audit attribution.
Effective-policy cascade
Company beats per-account. Reseller beats company. The same semantic applies to reads and writes — no phantom overrides.
Compliance preset packs
SOC 2, GDPR, PIPEDA, HIPAA-BAA, FedRAMP. Selecting one writes encryption, geo, retention, and audit policy in a single action.
Audit log
Event-typed with Lucide icons. Filters by event type, actor, time. CSV export streams rather than buffers.
Member management
Inline invite with magic-link activation, pending-invitations panel, drill-in side panel per member, bulk select/remove, per-company seat and storage caps.
Shared connexions
OAuth connexions promotable to company scope. Stale-provider badges before failed uploads. Auto region detection on promotion.
White-label reseller
Logo, colours, brand name, email-from. Per-tenant tier overrides, branded support, revenue split — partners resell day one.
Four reports. Dual-signed. Offline-verifiable.
Every report is dual-signed with HMAC-SHA-256 (online verify) and ML-DSA-87 (offline, FIPS 204 post-quantum). Pin our public-key fingerprint from /security and verify any signed report without ever calling the platform.
| Report | Contents | Chart |
|---|---|---|
| Sovereignty Audit | Account-wide and per-folder posture; per-jurisdiction shard distribution. | Gauge |
| Threat Scenario | Simulated jurisdiction loss, files at risk, files unrecoverable, score delta. | Radar |
| Standards / Compliance | Detected controls mapped to PIPEDA, GDPR, SOC2, FedRAMP, DGSI 100-8. | Donut + bubble |
| Resilience (financial) | Estimated financial impact of provider/jurisdiction loss scenarios. | Waterfall + projection |
The features users will actually touch.
Trash with 30-day retention
Every soft-delete lands in trash with a 30-day default before hard-purge. Restore is one click; permanent delete is signed and audited.
Bulk operations
Multi-select with bulk delete, bulk move, and bulk download-as-ZIP. The practical answer to "how do I move 50,000 files in?"
Semantic search
Search by meaning, not filename. "The contract with the indemnity clause" finds it whether or not those words are in the name.
Barrista assistant
In-app AI assistant grounded in your own corpus. Powered by SkyeGXU on Sovereign tier — no data ever reaches OpenAI.
File flyout
Info, Metadata, per-file SkyeMap, Versions. View and edit in place — code, image, PDF, Word, Excel, PowerPoint.
Tags & folder colours
User-defined tag chips and per-folder colour for visual organisation.
See every feature in 45 minutes.
A briefing covers the full surface: CloudRAID, the SkyeMap, the Threat Simulator, signed reports, SkyeGXU, mobile, virtual drive, and the S3 gateway.