Skip to main content
Quadrant
Blog

Sovereign S3 on your own storage

ObjectGateway gives your applications S3.On storage that you own.In the data center that you choose.

By subscribing, you agree that Quadrant Systems stores your details to send you news about ObjectGateway. You can unsubscribe at any time. Privacy notice

Developed in Switzerland

The ObjectGateway console: the dashboard with live traffic, latency, stored data, and system status
API for your applications
S3-compatible
The storage you already run
POSIX filesystems
Memory at 1,000 requests per second
~100 MiB
With every release
SBOM + CBOM

Built around what you already have

  • Keep your storage

    ObjectGateway adds S3 to the POSIX filesystems that you already run.

    • Local disks, NAS, and HPC filesystems
    • No new storage platform
    • Backups and capacity planning stay the same

  • In your control

    Your data, keys, and identities stay under your control.

    • Runs in your own data center
    • Your own keys and identity provider
    • Open standards and a clear exit path

  • Operationally simple

    One binary, three settings, and the tools that your operations team already uses.

    • systemd package, Compose, or Helm on Kubernetes
    • Health checks, Prometheus, and a Grafana dashboard
    • OpenTelemetry export and access logs

Cut the cost of S3

In the cloud, you pay for every download and every request.ObjectGateway runs on a small server next to your storage.Your traffic stays on your network.

Transfer fees per month
CHF 376CHF 0
Request fees per month
CHF 12CHF 0
Storage fees per month
CHF 230CHF 0

Example month: 10 TB stored, 5 TB downloaded, 2 million write and 8 million read requests, at the AWS list prices for S3 Standard in the Zurich region on 12 October 2026, converted at the ECB reference rate of USD 1 = CHF 0.83. ObjectGateway charges no fees per gigabyte or per request. Your own hardware and software are not included.

Parallax

Save even more

Parallax shows what each bucket costs, how it is used, and where it grows.It recommends lifecycle rules, storage classes, and compression, with the evidence behind each one.

  • FinOps: cost, capacity, and growth at a glance
  • Find cold data and waste
  • Apply each change yourself, or let Parallax act within your rules
Parallax in the ObjectGateway console: storage, transfer, and request cost per bucket in CHF

Everything in view

The console shows accounts, identities, buckets, and traffic in one place.Daily work needs no command line.

The ObjectGateway console: users and service accounts across accounts

AI native

Ready for your AI agents and pipelines

Ask in plain language, or automate it yourself.Your agent works with the ogw CLI and its built-in skill, and your own tools use the same Admin API.

  • Works with Claude Code and other agents
  • Always matches your installed version
  • Nothing is deleted without explicit confirmation
  • An OpenAPI document for the Admin API in every release

You

Set up a bucket for the finance team with a 2 TiB limit, and a key for their backup job.

Ran 4 ogw commands

Agent

Done. The bucket finance-reports is ready with a 2 TiB limit, and the backup job has its own key.

Orbit

Protect your data across sites

Orbit copies objects between buckets and sites by rules.It also keeps encrypted recovery points of your buckets in any S3 bucket.

  • Replicate between sites by rule
  • Encrypted recovery points in any S3 bucket
  • Restores that you start, follow, and cancel
Protect your data across sites

Houston

Mission control for your storage

Houston is the Kubernetes operator for ObjectGateway.Your teams ship S3 together with their apps.Control stays with you.

  • Storage for a new team without manual setup
  • Storage changes go through the same review as your code
  • Teams manage their own storage within the limits you set
  • Keys rotate automatically with a grace period for your apps
apiVersion: houston.quadrant.systems/v1alpha1
kind: ObjectGateway
metadata:
  name: core
  namespace: storage
spec:
  managed:
    version: 0.8.0
    values:
      persistence:
        size: 500Gi

The S3 your applications need

Built for the S3 features that backup tools, data platforms, and AI pipelines rely on.

  • Versioning
  • Object lock
  • Lifecycle rules
  • Storage classes
  • Quotas
  • Identities and policies
  • Single sign-on with OpenID Connect
  • Encryption
  • Static websites
  • Event notifications
  • Prometheus and OpenTelemetry

Who ObjectGateway is for

  • Public sector and regulated industries

    Self-hosted S3 with audit trails, your own keys, and a documented exit path. From a Swiss vendor that you can hold to account.

  • Hosting and service providers

    Offer S3 to your customers on the storage that you already run. Separate accounts and quotas per customer are built in.

  • Small and mid-sized companies

    S3 for backups and new applications on the NAS that you already have. No storage cluster to learn and run.

Questions and answers

Which storage does it work with?

With POSIX filesystems. We have confirmed:

  • Local filesystems such as XFS, ZFS, and ext4
  • Network storage such as NFS

Other POSIX filesystems work as well.

Will my S3 applications work with it?

Yes. Every release is tested with:

  • the AWS CLI
  • the AWS SDKs for Go and Python (Boto3)
  • MinIO Client
  • s3cmd
  • rclone

Where ObjectGateway differs from Amazon S3, the documentation says so.

How is ObjectGateway tested?

Every release passes an end-to-end gate before it ships:

  • The real gateway, driven by these clients
  • Simulated crashes at the points where data could be lost
  • Fuzzing of every parser
  • An upgrade test from the previous release
  • A stop when performance drops by more than ten percent
How do I run it?

As one process with one data directory, without a database or a cluster.

  • On Linux, as a systemd package, with Compose, or with the Helm chart on Kubernetes
  • With the console and the ogw CLI
  • On Kubernetes with Houston, which manages the gateway, accounts, buckets, and keys for your teams

The gateway is small enough for edge sites. At about 1,000 requests per second across one million objects, it uses about 100 MiB of memory.

The gateway itself needs little CPU. Most of the work is the filesystem writing your data safely to disk, so the disks decide the size of the server, not the cores.

The container image holds only the gateway, with no operating system, shell, or package manager inside.

Can I offer S3 to several customers?

Yes. Each customer gets an account of its own, with its own users, keys, policies, and quotas. Customers do not see the buckets of other customers.

Can I move data from another S3 store?

Yes. Every S3 tool that copies between buckets works, for example rclone or the AWS CLI.

Where is my data, and how is it protected?

In your data center, on your storage.

  • Every object is on disk before ObjectGateway confirms the write. After a crash, you find either the old or the new version of an object, complete
  • Encryption with keys that the gateway holds (SSE-S3) or with your own keys (SSE-C)
  • Default encryption for every write to a bucket
  • Object lock in governance or compliance mode, and legal holds

In compliance mode, nobody can remove a locked version before its date, not even the administrator.

Can I automate the administration?

Yes. The console and the CLI both work through the Admin API.

  • Every release ships an OpenAPI document of every operation
  • Generate a client for your own tools and pipelines
  • Declare your storage as Kubernetes resources with Houston
  • Every call is recorded in the audit trail
Do I need the other products?

No. ObjectGateway runs on its own. Add the others when you need them:

  • Orbit for replication and backup
  • Parallax for analytics and cost insight
  • Event Bridge for bucket events to webhooks and NATS JetStream
  • Houston to manage it all from Kubernetes
Does Parallax change anything on its own?

Only if you allow it. By default, you apply each recommendation yourself.

  • An account can switch on autopilot, within the rules and daily limits that it sets
  • Autopilot never deletes your objects or their versions
  • Every autopilot change is recorded, and a lifecycle change can be rolled back
Who is behind ObjectGateway?

Quadrant Systems, a software engineering company in Switzerland. We build software that keeps organizations in control of their infrastructure.

Stay up to date

Get news about ObjectGateway: releases, new features, and articles.Only when there is something worth reading.

By subscribing, you agree that Quadrant Systems stores your details to send you news about ObjectGateway. You can unsubscribe at any time. Privacy notice