01 — Open-source BaaS for product teams

Everything.
One Space.

Prismatica keeps auth, database, files, email, dashboards, and product workflows on one self-hostable backend canvas. GDPR-ready, fully typed, and yours forever.

See it in action

6Backend primitives
1Docker file to run it
0Vendor lock-in
EUData residency

Trusted by product teams everywhere

Northwave
Kollektiv
Halcyon
Foundry
Axiom Lab
Praxis

What you get

A backend stack you would have built — already built.

Three primitives, one Docker Compose file, full keys to the kingdom.

Auth that just works

Auth with GoTrue under the hood, social providers, magic links, and Turnstile-protected sign-ups out of the box.

PostgREST + Postgres

Your schema is your API. Row-level security, typed queries, instant realtime — no glue code.

GDPR by default

GDPR by default: consent ledger, DSAR exports, breach response runbook, and EU data residency baked in.

Workspace anatomy

One canvas, many windows.

Notes, auth, metrics, Postgres rows, email events, and product workflows all live in one place without losing the backend wiring underneath.

Inside the studio

Click a service. Watch the backend reshape.

One canvas. The diagram is the control panel — tap any node to toggle the service. Presets reshape the whole stack in a click. Latency, cost,GDPR coverage and attack surface update as you go.

preset · startuptap a node to toggle

Active: —/ 15
p95 latency: —ms
Cost: €—/mo
GDPR: —%
Surface: —/10
MAU: —

Balanced stack — production-ready out of the box.

Pricing

Pick a tier. Switch anytime.

No seat counts. No vendor lock-in. Self-host whenever you want.

Free

€0forever

For solo builders and side projects.

1 project · 5K MAU
Auth, Database, Storage
Community support
EU data residency

Team

Self-hosted

Freeforever · MIT

Run the whole stack on your VPS.

Unlimited everything
Docker Compose + Helm
Audited GDPR runbooks
Optional paid support

See the docs

Built for engineers

Read the docs.
Ship in an afternoon.

Every endpoint typed. Every recipe runnable. Every page versioned.

Open the docs

import { createClient } from '@grobase/js';

const baas = createClient({ url, anonKey });

const { data, error } = await baas
	.from('projects')
	.select('id, name, owner:users(email)')
	.eq('archived', false);

FAQ

Answers, before you ask.

Can I really self-host the whole stack?
Yes. The entire backend infrastructure repo is MIT licensed: Kong, GoTrue, PostgREST, Postgres, MailHog. One docker compose up and you are running locally; the same images deploy to any VPS.
Where does my data live?
Wherever you put it. The hosted tier runs in EU regions (Paris and Frankfurt). Self-hosted means your machines, your jurisdiction, your DPA — we never see the data.
How does pricing work as I grow?
You pay per active project, not per seat. Move from Free → Team in one click. If you outgrow Team, self-host: same code, no migration.
How do I migrate from another BaaS?
PostgREST means your schema is the API. Most teams import their existing dump, point Kong at it, and ship in under a day. We have migration recipes for Supabase, Firebase and Hasura.
What about security audits?
Auth flows ship with Turnstile, rate-limit and CSP defaults. The repo includes a published threat model, breach-response runbook, and OWASP ASVS L2 mapping in /docs/gdpr/.

Your backend, ready in an afternoon.

Open-source. GDPR-ready. Yours forever.

Read the docs

No credit card. Self-host whenever you want.