Data sovereignty
Each tenant operates on its own database file — isolation is mechanical, not a WHERE clause you hope never fails. Export tenant data and compiled rules on demand.
Enterprise
The application platform built for regulated operations
One FSM-native stack — workflow, data model, UI, audit, and integrations — with mechanical per-tenant isolation and a clean exit. Deploy managed cloud, on-prem, or mobile fleet.
Platform thesis
FastYoke is an application platform as a service (aPaaS) purpose-built for operations-intensive organizations where process integrity, auditability, and data residency are procurement requirements—not afterthoughts.
Line-of-business capabilities—CRM, inventory, field service, patient throughput, and financial operations—are delivered as installable applications on a single platform core. Teams consolidate onto one governed environment rather than coordinating across multiple SaaS products with inconsistent data models, integration middleware, and audit trails.
Related reading: The seat is dying: SaaS pricing when software gets cheap to build — why consolidating onto one platform core matters more as the per-seat SaaS model breaks down.
State transitions are enforced through a finite state machine with sandboxed guard evaluation, recorded in an append-only event log, and exposed through role-gated APIs. This architecture aligns with the controls enterprise security and compliance teams expect to validate.
Sovereignty
Three guarantees incumbents cannot copy-paste
Logic sovereignty
Guards compile to WebAssembly with fuel and memory caps. Your business rules run in-process — no opaque cloud scripting tier.
UI sovereignty
Advanced App Builder output is standard Next.js/Astro you can host anywhere. You own the frontend repository.
Deployment
Run FastYoke where your data lives
Same application code across substrates — choose managed cloud, air-gapped on-prem, native mobile fleet, or distributed SQL when scale demands it.
Runtime
Local FSM engine for dev and single-node. Free — same app package deploys to Cloud SaaS unchanged.
Available post-GA release
Learn more
On-Prem
Your servers. Air-gap friendly. Full data sovereignty.
Enterprise pilot
Learn more
Substrate ✦
Native mobile for your fleet. OTA delivery. Team+ add-on.
Early access · Q1 2027
Learn more
FastYoke DB
Distributed SQL for HA, geo, and DR. Enterprise+ managed hosting.
Enterprise+
Learn more
Roadmap
Also in the pipeline
Studio
Unified visual canvas — the on-rails wizard and Advanced App Builder ship today; the single canvas view is still in development.
In development
See Studio
Security & compliance
Artifacts for security and compliance review
Deployment substrates, on-VM RAG posture, Compliance Yoke, and attestations — packaged for procurement packets without replacing the full Security executive summary.
| Control | Posture |
|---|---|
| Tenant isolation | Dedicated SQLite file per tenant (or FastYoke DB substrate at scale) |
| Field-level encryption | Optional PII/SPI add-on (AES-256-GCM per tenant) |
| On-VM RAG (Yoker) | Embeddings and vector search on your VM; cited sources; Enterprise included |
| SSO | WorkOS AuthKit |
| HIPAA | BAA + add-on on Enterprise tier |
| GDPR | DPA, data-subject rights, EU region pinning |
| Accessibility | VPAT 2.5 — download on Security |
| SOC 2 Type II | Roadmap — bridge letter on request |
Full posture: Security executive summary · Yoker RAG overview · Subprocessor list · Trust Center (technical)
Identity & access
- 72-permission RBAC catalog — every API and UI surface gates on explicit permissions.
- Personal Access Tokens — scoped
fy_pat_tokens with hard refusals outside granted scopes. - Strategic Partner consent — implementation partners reach a tenant only while a per-tenant grant is active.
Implementation partners
Enterprise rollouts — especially on-prem and vertical FSM design — typically pair FastYoke with a certified implementation partner. See Partners and On-Prem deployment.
Start the enterprise conversation