No custody as a starting point

Most data solutions promise to protect your information after taking custody of it. We build systems that never take custody at all. downpipes restores your Cloudflare estate from backups only you can open. It never holds a copy we could lose, leak, or be compelled to hand over.

We work in an area where the usual approach creates the problem it claims to solve: disaster-recovery vendors holding a copy of everything you own. downpipes restores your estate without us holding what matters.

You cannot leak what you never had, and you cannot lose what only you can open. No-custody is not a feature. It is an architectural constraint.

What we build

downpipes

No-custody backup and recovery for the Cloudflare data layer. Runs in your own account, sealed under keys only you hold. We never see your data. Learn more →

How we work

Open and auditable

The code you run is published so you can check it. downpipes is source-available with an MIT offline reader. Our security overview and legal terms are public. Trust built on code, not promises.

Signed, pull-only updates

The engine pulls a signed update channel and checks it against a pinned public key. It deploys an update only when the update's SHA-384 hash matches the channel. The apply is canary-gated, with automatic rollback.

Memory-safe foundations

TypeScript on the Cloudflare edge and a Go offline reader: both memory-safe languages.

One management system

Breach-notification and data-protection obligations, governed under one ISO 27001-aligned ISMS. We publish its summary and share the detail on request.

Founded by Tim O'Connor

Tim O'Connor is the founder and director of Maelstrom AI.

Entity Maelstrom AI Pty Ltd ATF Maelstrom AI Holding Trust
ABN 61 633 823 792
Jurisdiction Victoria, Australia
Address PO Box 169, St Arnaud VIC 3478

Work with us

If you are building in regulated environments and need no-custody backup for your Cloudflare estate, we would like to hear from you.