Introduction
Object storage with a developer-first DX, built on Cloudflare R2.
Vault is S3-grade object storage with a Resend-grade developer experience. One API key, a typed SDK, signed-URL uploads, resumable multipart, and webhooks — all backed by Cloudflare R2, with zero egress fees.
Why Vault
One API key
No SigV4, no ceremony. A single bearer key and a typed SDK for Node, the browser, and the edge.
Signed URLs
Time-limited, method-scoped upload and download URLs so bytes never round-trip your server.
Resumable multipart
The SDK switches to multipart automatically for large files, with retries and abort handling.
Per-tenant isolation
Every object is namespaced and every read is ownership-checked.
How it works
Vault runs entirely on Cloudflare. A Worker is the only thing that touches R2; your objects live in logical buckets (which you create by name) that map to isolated key prefixes inside a sharded pool of physical R2 buckets. You never handle R2 credentials.