01
Plain-English to working app
Describe the app you need in plain words. The AI agent in Studio writes the code, tests it in a sandbox iframe, and shows you the live preview.
Use case
Studio fits naturally into this flow.
00
Application · uStudio
Studio.
Encrypted by default.
AI-powered app builder
01
What you can do
What you can do
What you can do with Studio.
02
Code tab, asset upload, AI-driven control
Edit the generated source on the Code tab if you want. Upload assets. AI-driven preview control can click / type / scroll / snap to verify the build.
Use case
Studio fits naturally into this flow.
03
Submit for review, install locally, publish
When the project is ready, submit it for review. Install it locally for your workspace, or publish it on the Marketplace for the broader UltimaOS community.
Use case
Studio fits naturally into this flow.
02
Security
Security
Security for Studio.
Every UltimaOS app shares the same post-quantum cryptographic stack, so the security properties below apply uniformly. App-specific considerations are noted where they apply.
01
Post-quantum cryptography by default
All authentication and key exchange uses NIST-standardized ML-DSA-65 (FIPS 204) signatures and ML-KEM-768 (FIPS 203) key encapsulation. There is zero RSA, zero elliptic-curve, zero classical-only crypto in the authentication path. Defeats store-now-decrypt-later attacks.
02
End-to-end encryption on your device
Every payload is encrypted in your browser using XChaCha20-Poly1305 (RFC 8439) with a 192-bit nonce and a Poly1305 authentication tag. The plaintext exists only in your tab's memory. When you close the tab, the plaintext is gone.
03
Zero-knowledge server
The UltimaOS server only ever stores ciphertext and public keys. We cannot read your data — by design, not by promise. There is no encryption backdoor, no master key, no key escrow.
04
Multi-device sync, single private key
Your private key is derived from your passphrase using Argon2id with high parameters. New devices derive the same key locally and can decrypt your entire history. The passphrase is never sent to the server — it is verified by an ML-DSA-65 signature on a server-issued challenge.
03
How it works
How it works
How Studio works.
-
01
Open Studio in your browser
UltimaOS runs in any modern browser — Chrome, Firefox, Safari, Edge. Nothing to install. Sign in with your passphrase-derived key, or restore from a 3-of-5 social recovery if you are on a new device.
-
02
Your data is encrypted before it leaves your device
Every action — sending a message, uploading a file, creating a task, scheduling an event — is encrypted with XChaCha20-Poly1305 and authenticated with an ML-DSA-65 signature before any byte crosses the network boundary.
-
03
Server stores ciphertext, returns it on demand
The UltimaOS server keeps an opaque blob per account and per conversation. When you open Studio, the encrypted blobs are streamed to your device, decrypted locally, and rendered. The server never sees plaintext.
-
04
Changes sync to every device you sign in on
Any change you make is encrypted and uploaded; every other device you are signed in on pulls the new ciphertext and decrypts it. Live multi-device sync, with the cryptography guarantee that only your devices can read it.
04
Inside the suite
Inside the suite
How Studio fits in the suite.
01
Marketplace
Submit the app you built in Studio to the Marketplace. Reviewers check privacy and quality.
02
Files
Upload assets to your project from Files. Assets inherit the same encryption as the rest of the workspace.
03
Documents
Studio projects can reference Documents for spec and design notes.
04
Account
Studio publishes under your identity. Identity is bound to your private key, not a password.
05
Get started
Get started
Get started with Studio.
-
01
Open Studio in your browser
UltimaOS runs in Chrome, Firefox, Safari and Edge. Nothing to install. Sign in with your passphrase to derive your private key locally.
-
02
Open the workspace and launch Studio
The launcher shows every app. Studio is right there with its capsule video preview. Click to open.
-
03
Connect it with the rest of the suite
Studio works alone, but it shines when combined with the rest of the UltimaOS apps. Same private key, same encryption, one workspace.
07
Frequently asked
Common questions
Questions about Studio.
Is Studio end-to-end encrypted?
Short answer
Yes. All content in Studio is encrypted in your browser using XChaCha20-Poly1305 with a fresh key per item. The UltimaOS server only ever stores ciphertext and public keys — it cannot decrypt your data, no matter who asks.
What cryptography does Studio use?
Short answer
Studio uses the same post-quantum stack as every other UltimaOS app: ML-DSA-65 (FIPS 204) for authentication, ML-KEM-768 (FIPS 203) for key encapsulation, XChaCha20-Poly1305 (RFC 8439) for symmetric encryption, HKDF-SHA256 for key derivation, and Argon2id for passphrase hashing.
Can I use Studio on multiple devices?
Short answer
Yes. Sign in on any device with your passphrase and the same private key is derived locally. All your Studio content is then decrypted from the encrypted blobs the server returns. Changes sync live across all signed-in devices.
Is Studio GDPR-compliant?
Short answer
Yes. UltimaOS is built and operated in the European Union by an EU company. The architecture is GDPR-compliant by design — encrypted data, EU-only infrastructure, no US CLOUD Act exposure, no advertising, no third-party trackers. See the GDPR page for the full breakdown.
How much does Studio cost?
Short answer
During early access, UltimaOS is free for individuals and organizations. After early access, pricing will be per-seat with accessible family tiers and per-organization plans for businesses. There is no per-app add-on.
Can I export my Studio data?
Short answer
Yes. UltimaOS supports encrypted export of all your content for backup and portability. The export is encrypted to a key you control; you can store it on your own infrastructure or in a personal encrypted backup.
Do apps I build in Studio run on UltimaOS?
Short answer
Yes. Apps built in Studio run inside the encrypted UltimaOS workspace — either locally for you, or published to the Marketplace for the broader community. Either way, the app runs inside the sandbox with the same cryptographic guarantees.