Features

Everything you need.Nothing you don't.

nfyio ships with the full stack — storage, AI, auth, billing, and team management. No glue code required.

Everything you need. Nothing you don't.

nfyio ships with the full stack — storage, AI, auth, billing, and team management.

AI-Compatible Storage Services

Drop-in replacement for AWS S3. Full API compatibility — use any S3 client, SDK, or tool you already have.

Semantic Embeddings

Automatically index your objects with OpenAI or Voyage AI embeddings. Query by meaning, not just filename.

Agentic RAG Runtime

Multi-step AI agents with tool use, policy gateway, and full audit trails. Powered by LangChain + GPT-4o.

Enterprise-Level Security

Zero-trust architecture with row-level security, JWT-based access control, MFA, IP firewall, and full audit trails baked in.

Multi-tenant Teams

Workspaces, projects, teams, invite flows, owner/modifier/viewer roles — all production-ready.

Built-in Billing

Stripe, PayPal, SEPA, SWIFT, PayTR support. Plan management, transaction logs, and usage metering.

Storage

AI-Compatible Storage Services

Drop-in replacement for AWS S3. Full API compatibility — use any S3 client, SDK, or tool you already have without modification.

  • Virtual-hosted and path-style URL routing
  • SSE (Server-Side Encryption) support
  • Object versioning and lifecycle rules
  • Presigned URLs and multipart upload
  • Bucket ACLs and fine-grained IAM-style policies
  • SeaweedFS backend for distributed blob storage
storage
Virtual-hosted and path-style URL routing
SSE (Server-Side Encryption) support
Object versioning and lifecycle rules
Presigned URLs and multipart upload
AI & Embeddings

Semantic Embeddings

Automatically index your objects with OpenAI or Voyage AI embeddings. Query by meaning, not just filename. Built on pgvector for sub-millisecond similarity search.

  • OpenAI text-embedding-3-small/large support
  • Voyage AI embeddings integration
  • pgvector similarity search per bucket
  • Auto chunking and re-index on update
  • LangChain integration built-in
  • Embedding analytics and usage metering
ai & embeddings
OpenAI text-embedding-3-small/large support
Voyage AI embeddings integration
pgvector similarity search per bucket
Auto chunking and re-index on update
Agents

Agentic RAG Runtime

Multi-step AI agents with tool use, policy gateway, and full audit trails. Build complex retrieval pipelines without managing LLM orchestration yourself.

  • Multi-step tool loop with GPT-4o
  • Policy gateway — allow/deny per tool
  • SSE streaming responses
  • Persistent threads across sessions
  • Full audit logging per agent run
  • LangChain tool ecosystem support
agents
Multi-step tool loop with GPT-4o
Policy gateway — allow/deny per tool
SSE streaming responses
Persistent threads across sessions
Security

Enterprise-Level Security

Zero-trust architecture from day one. Every access decision is enforced at the database level with row-level security, not application filters.

  • Row-level security on every table (no exceptions)
  • JWT access control with automatic refresh rotation
  • MFA / TOTP with backup codes
  • CSRF protection and rate limiting per endpoint
  • IP / hostname firewall rules
  • Cloudflare WAF integration
  • AES-256-GCM session encryption
  • Full audit trail on every auth event
security
Row-level security on every table (no exceptions)
JWT access control with automatic refresh rotation
MFA / TOTP with backup codes
CSRF protection and rate limiting per endpoint
Teams

Multi-tenant Teams

Production-ready workspace hierarchy with granular roles and API token scopes. Invite teammates and control exactly what they can access.

  • Workspace → Project → Team hierarchy
  • Email invite flows
  • Owner / Modifier / Viewer roles
  • API token scopes with route restrictions
  • Per-workspace usage isolation
  • Audit log per workspace action
teams
Workspace → Project → Team hierarchy
Email invite flows
Owner / Modifier / Viewer roles
API token scopes with route restrictions
Billing

Built-in Billing

Complete billing stack with multiple payment providers, plan management, and per-workspace usage metering — all self-hosted.

  • Stripe, PayPal, SEPA, SWIFT support
  • PayTR for Turkey-based customers
  • Plan management with immediate effect
  • Automatic proration on upgrade/downgrade
  • Transaction logs per workspace
  • Usage metering: storage, requests, tokens, docs
billing
Stripe, PayPal, SEPA, SWIFT support
PayTR for Turkey-based customers
Plan management with immediate effect
Automatic proration on upgrade/downgrade

Ready to deploy nfyio?

Full platform access. Self-hosted. MIT licensed. No vendor lock-in.