Hafiz
Enterprise S3-Compatible Object Storage
High-performance object storage written in Rust. Full S3 API compatibility with immutable audit logs using blockchain-style cryptographic chaining, data deduplication via SHA-256 content addressing, AES-256-GCM encryption at rest, Object Lock (WORM) for HIPAA/FINRA compliance, multi-cluster replication, and LDAP/Active Directory integration.
Capabilities
Core Features
Enterprise-grade object storage built for performance, security, and compliance.
S3 API Compatibility
90+ S3 API endpoints fully implemented. Drop-in replacement compatible with AWS SDKs, CLI tools, and existing S3 workflows without any code changes.
Server-Side Encryption
AES-256-GCM encryption at rest with support for customer-managed keys (SSE-C) and server-managed keys (SSE-S3). All data encrypted before hitting disk.
Immutable Audit Logs
Blockchain-style cryptographic chaining ensures audit log integrity. Every operation is recorded with tamper-evident hash chains for forensic analysis.
Data Deduplication
SHA-256 content-addressed storage eliminates duplicate data blocks. Achieve up to 90% storage savings while maintaining instant access to all objects.
Object Lock / WORM
Write-Once-Read-Many (WORM) storage with governance and compliance modes. Meets SEC 17a-4, FINRA, and HIPAA regulatory retention requirements.
Multi-Cluster Replication
Asynchronous cross-cluster replication with erasure coding for data durability. Geographic distribution ensures disaster recovery and low-latency access.
System Design
Architecture
Modular Rust architecture designed for maximum performance and reliability.
S3-compatible REST API layer built on Axum. Handles all S3 operations including multipart uploads, presigned URLs, and bucket policies.
Authentication and authorization module. AWS Signature V4 verification, LDAP/Active Directory integration, IAM policies, and access key management.
Storage engine with content-addressed deduplication. Manages data placement, erasure coding, replication, and Object Lock retention policies.
PostgreSQL-backed metadata service. Manages bucket and object metadata, versioning, tagging, lifecycle policies, and listing operations.
Cryptographic services module. AES-256-GCM encryption, SHA-256 hashing, blockchain-style audit log chaining, and key management.
Have a project in mind?
We're happy to talk — whether you need a product, consulting, or just want to bounce ideas.