Prompt-to-app scaffolding
Plain-English intent becomes a full schema, screens, and permissions. Every generation is a diff you can accept, edit, or discard.
Features
Everything in the box. No per-seat surprises.
A short list, on purpose. Four pillars — building, security, hosting, and economics — and no upsell surface between you and any of them.
The four pillars
Four things we do well, done thoroughly.
The same platform, whether you run it Hosted by AnySaaS or self-host it on your own infrastructure. Paid plans add SSO, audit logs, and support — not the features you build with.
01 — Builder
AI-assisted building, on rails.
Describe the app. Get a signed, versioned artifact — not a demo.
Standardized UI patterns
The assistant can’t improvise a bespoke widget. Every screen composes from the same audited primitives — one design system, one attack surface.
Schema-first data model
Entities, relationships, and constraints are first-class. Change the schema and the app rewires itself; the diff shows exactly what moved.
Versioned generations
Every publish is an immutable version with a checksum. Roll back to any prior generation from the workspace in a single click.
Grounded assistant
The model only asks about things that would change the schema or permissions. No prompt engineering, no leading questions, no hallucinated fields.
Bring your own AI model
Point the builder at OpenAI, Anthropic, a local model, or use ours. The AI layer is configurable per deployment — you decide what runs where.
02 — Security
Security is the default state, not a toggle.
What most platforms ship as an add-on, we ship as the baseline.
Authentication out of the box
OIDC, email/password, magic links, and passkeys — pre-wired. Enterprise SSO (Okta, Google, Azure AD) is a config change, not a project.
Role-based access control
Fine-grained permissions on records, fields, actions, and screens. Roles are versioned with the app and enforced at the API layer.
Encryption at rest and in transit
AES-256 at rest, TLS 1.3 in transit. Key rotation and per-tenant keys supported on Enterprise deployments.
Audit trail on every write
Who did what, to which record, when — with the before/after payload. Stream events to your SIEM via webhook or S3 drop.
Compliance-friendly by construction
GDPR-ready data handling, region pinning, and export/erasure endpoints. SOC 2 and HIPAA collateral available on Enterprise.
No third-party leakage
The generated app has no callback to us. Telemetry is opt-in, granular, and inspectable. Air-gapped deployments supported.
03 — Hosting
Hosted by us, or on your own infrastructure.
One platform image, two ways to run it. Your choice, same features.
Hosted by AnySaaS
A typical SaaS experience — we run the platform for you, with managed updates and a 99.9% SLA in EU or US regions. Nothing to deploy.
Self-hosted, one image
The exact same AnySaaS platform ships as a single Docker image, identical for every customer. Deploy it once and build every app inside it.
Any cloud or on-prem
Self-hosted runs on AWS, Azure, GCP, DigitalOcean, Hetzner, bare metal, or air-gapped. If Docker runs, AnySaaS runs.
Data residency you control
Self-hosted keeps every byte in the region and account you specify. Hosted lets you pin residency to EU or US at signup.
Zero-downtime upgrades
New platform versions ship as new image tags. Migrations are forward-only and reversible; blue/green deploys are the default recipe.
Environments as first-class citizens
Dev, staging, and production are configurable, cloneable, and diffable. Promote an app version between environments with one command.
04 — Economics
One deployment. Unlimited users. Flat fee.
The number of people using your apps is not our business.
Unlimited end-users
From 100 to 100,000 — the platform fee does not move. End-user seats are always unlimited on every plan.
Flat platform fee
You pay for the platform, not for people. One price per deployment, whether you have five builders or fifty.
Free evaluation tier on Self-hosted
A free evaluation tier is available on Self-hosted so teams can try the platform on their own infrastructure before committing.
Hosted or self-hosted, same features
The paid Hosted and Self-hosted plans expose the same platform features. Pick where it runs based on your infra strategy, not on feature FOMO.
Data portability
Your data lives in standard Postgres. Export it at any time — first-class export and erasure endpoints included.
Predictable pricing
One flat fee, no per-user or per-developer charges. The platform price is the whole bill — headcount never changes it.
Specifications
The unglamorous half of the datasheet.
What the platform runs on, what it plugs into, and where the ceilings are.
| Category | Detail |
|---|---|
| Runtime | |
| Container | OCI-compliant, ~180 MB compressed |
| Database | PostgreSQL 14+ (bring your own or bundled) |
| Object storage | S3-compatible (AWS S3, MinIO, R2, GCS) |
| Cache / queues | Redis 7+ (optional, auto-detected) |
| Node runtime | Not required — everything ships pre-built |
| Identity | |
| Local auth | Email + password, magic link, passkeys |
| SSO | OIDC (Google, Okta, Azure AD, Auth0) |
| Enterprise SSO | SAML 2.0, SCIM 2.0 (Enterprise plan) |
| MFA | TOTP, WebAuthn, backup codes |
| Session store | Rotating JWT + refresh tokens |
| Integrations | |
| Databases | Postgres, MySQL, SQL Server, MongoDB |
| APIs | REST, GraphQL, gRPC (Enterprise) |
| Files | S3, GCS, R2, Azure Blob |
| Messaging | Slack, Teams, Discord, generic webhooks |
| Observability | OpenTelemetry, Prometheus, Datadog |
| Limits | |
| Apps per workspace | Unlimited |
| End-users per app | Unlimited |
| Developer seats | By plan |
| Records per table | DB-bound (tens of millions tested) |
| API rate limit | Configurable per role |
See the full pipeline, or price it up.
The three-step build → deploy walk-through, or the plan that fits your team. Both short reads.