COMMUNITY EDITION

Core0 on one machine, free

A self-hosted vault for personal data. Your application stores a token; the real value never leaves the machine you control. Core0 receives nothing, phones home to nobody, and has no vendor endpoint to compromise. Community Edition is that whole architecture on a single machine — meant for testing before you buy, and for running something small at home.

What you get

• PII tokenisation — field-level encryption, with the key layer separated from the data layer
• Tamper-evident audit log — every entry carries a sequence number and the hash of the one before it
• Data export — your records out as a file from the admin panel, whenever you want
• Connector and API — the same integration surface as the paid editions
• Admin panel — record counts, service health, certificate expiry, audit search

Everything runs in containers on one node. The licence included runs for ten years. When any Core0 licence lapses, reads and exports keep working for a further two weeks — long enough to get your data out, whatever you decide to do next.

The limits, plainly

100 new tokens per day. A hard cap, not a nag screen. Reads are unlimited — only the creation of new tokens counts against it. Enough to run it at home or put it through its paces before you spend anything. Not enough to run a business on, and that is deliberate.

One node means no replication and no failover: if the machine goes down, the vault is down until you bring it back. The Core0 software is the same as Starter; the separation is not. What Starter adds is distance — the deployment spreads across three nodes, so the data layer and the key layer no longer share a machine. On one node, anyone who takes the box takes both. ObsydiaFiles, the document store, starts at Pro.

What you need

• Ubuntu 24.04 LTS or 22.04 LTS, ideally a fresh install
• A static address on your network
• Internet access during installation, for the download

Hardware: 2 vCPU, 4 GB of RAM (8 GB suggested) and 20 GB of SSD (40 GB suggested). The table for every edition is on Getting started.

Installation is a single command that pulls what it needs and brings up the containers:

curl -fsSL https://obsydia.tech/install-ce.sh | sudo bash

From there the wizard runs in your browser — the same one the paid editions use, showing you the log as it goes. See what that looks like.

The key ceremony applies here too

At the end of the install, Core0 generates the master encryption key and splits it into three Shamir shares. Two of the three reconstruct it. The shares are displayed once, and nobody at Obsydia ever sees one — we cannot read your data and cannot be compelled to hand over a key we do not have.

The other side of that guarantee is blunt: lose two of the three shares and the data is gone, for you and for us. There is no vendor override, because a vendor override is exactly the thing this design exists to remove. Even at home, keep the shares apart — a password manager and two pieces of paper in different places is enough. All three in one drawer defeats the scheme entirely. If you want a copy that survives losing the vault, use the export.

When you outgrow it

Starter lifts the cap and spreads Core0 across three nodes, which is where the separation between data and keys stops being a diagram and starts being physical. Pro adds ObsydiaFiles. Enterprise adds replication and failover. Work out what a metered vault would cost you over the same year.

Get Community Edition

Enter your email. We send your licence, a 24-hour update token and the install command to that address. Nothing else, ever.