SYS:ABOUT // InferaDB
The authorization company
Founded by engineers behind OpenFGA at Auth0. Purpose-built authorization infrastructure for modern software.
Origin
We spent years building authorization at Auth0 and Okta — including OpenFGA, now a CNCF incubating project used in production by Grafana Labs, Docker, and Canonical. We shipped software that millions of developers depend on. And we kept running into the same wall.
Every existing approach relies on general-purpose databases that weren't designed for this workload. Every system trades correctness for performance, or performance for auditability. Every architecture assumes application-level multi-tenancy is good enough — until a cross-tenant data leak proves it isn't.
We set out to build what we wished we could have built at Auth0: purpose-built authorization infrastructure. Custom storage engine. Cryptographic isolation. Consensus replication. Not another policy engine bolted onto a general-purpose database. A fundamentally different architecture — delivered as a managed service.
Design Principles
Every decision is explainable
Authorization is derived from reasoning over relationships, not static role lookups. Each decision is a provable inference — explainable, traceable, independently auditable.
Consistency above all
Eventual consistency is unacceptable for authorization. If Alice revokes Bob's access, Bob must lose access immediately — not eventually. Raft consensus with revision tokens makes this a guarantee.
Transparent trust
Every decision is cryptographically signed, hash-chained, and replayable. Auditors can independently verify that no records have been altered — without trusting the server.
Developer-centric experience
Authorization should be understandable, testable, and observable. Branch, test, and merge permission schemas like code. Integrate in under 30 minutes. The tooling matters as much as the throughput.
Team
By the Numbers
Open Source and Standards
InferaDB's core authorization engine is open source, dual-licensed under MIT and Apache 2.0. We believe authorization infrastructure should be transparent, auditable, and community-driven.
We implement the OpenID AuthZEN specification — the industry's first standardized authorization API. Our architecture is inspired by Google Zanzibar, the system Google built to handle authorization for YouTube, Drive, and Cloud at trillions of checks per day.
Stop building permissions. Start shipping features.
Lock in launch-day pricing and be first to deploy.