July 7, 2026.The Swedish digital agency ZORC AB (reg. no. 559481-8857) is behind sSystm - what the company describes as the world's firstBYOC agency OS: a complete operating system for agencies where customer data does not end up in a central supplier database, but in a database that runs on the agency'sowncloud account. Today sSystm opens its waiting list and starts activating the first beta testers.
The promise is easy to formulate but unusual to actually deliver:"Your clients. Your code. Your cloud."Your customers, your code, your cloud - in your own Cloudflare account, in the region of your choice.
Why this is different
Almost all SaaS you use today work the same way: all customers' data is collected in the same central cloud database at the provider. That creates three problems that agencies rarely think about until it's too late:
Aggregate risk.A single data breach can exposeallcustomers at the same time.
Insecure data residency.Where your data resides is a promise in a contract – not a physical guarantee. Promises are subject to change.
Lock-in.The day you want to change tools, you have to export everything and rebuild the relationships by hand.
sSystm turns the entire model on its head. There is no central mega-database. When you log in, the platform provisions a dedicated database (Cloudflare D1) onyoursaccount, iyourregion – with the option of locking it into hard EU jurisdiction. If you disconnect sSystm, the provider loses access, but the database is still yours, in your account. We go through the whole idea inWhat is BYOC?
Why "the world's first"?
BYOC - Bring Your Own Cloud - is not a new idea in itself. The model already exists, but so far exclusively asinfrastructure and devops tools: platforms likeNorth flank, Aiven, Railwayand Coherence runs databases, containers or test environments on the developer's own cloud account. Each solves a piece of the infrastructure.
None of them is a complete operating system to actuallydrivean agency. This is where sSystm is first:the world's first BYOC platform built from the ground up for developers and agencies in the digital landscape– where CRM, projects, invoicing, documents, marketing, code generation and AI reside in the same workspace, and that entire workspace lives on your own cloud. Not a devops primitive with BYOC tacked on, but an entire agency OS that is BYOCby design.
Cloudflare at the center – control everything without leaving sSystm
What is truly unique is the deep connection with Cloudflare. For developers and agencies, this means they get access to Cloudflare's extreme security and global infrastructure - but don't have to jump between tools. Most settings are made directly in sSystm, without even having to visit Cloudflare's dashboard:
Manage domains and DNSdirectly in the interface.
Do security checksand set up access rules (block or challenge traffic by IP or country).
Get alerts and see statisticswithout digging into consoles.
Deploy apps you built in the Build moduleto your own account - with a single button press.
Every change goes through an approval rail:nothing is written sharply until you say yes.
Security you inherit - and that gets better on its own
The truly unique thing about building on Cloudflare isn't justwherethe data is there, without what you get in return. Because sSystm runs on Cloudflare's network and on your own Cloudflare accountyou automatically inherit Cloudflare's security—and every improvement they make.Cloudflare evolves at a pace few can match, and that evolution reaches you without you having to configure, upgrade, or even know about it. Your security thus follows the fastest development in the industry – automatically.
What this means concretely:
World-class DDoS protection.Cloudflare's network has passed 500 Tbps in capacity – enough to absorb the largest congestion attacks ever measured. In 2025, Cloudflare automatically stopped the largest DDoS attack on record to date, peaking at 31.4 Tbps – while the number of attacks more than doubled during the year. You get that protection by default.
Web Application Firewall (WAF).Blocks OWASP Top 10 - such as SQL injection and cross-site scripting (XSS) - and zero-day exploits, without the need to become a security expert or manage complex rulesets.
Zero Trust and Identity-Based Access.Logging in through Cloudflare provides identity-based control and login protection built in from the first request – no VPN, no passwords to leak.
Adaptive, AI-powered defense.Machine learning that discovers new attack vectors and bot traffic in real-time, as the threat landscape changes.
The bottom line: security isn't something we're trying to catch up with Cloudflare - it isisCloudflare, and it updates at their pace, not ours. Read more at Cloudflare aboutDDoS protection, WAFand theirsthreat report for Q4 2025.
Login: a single Cloudflare connection
There is no e-mail and no password to forget. The only login method isCloudflare OAuth– which in itself increases security, as the account is protected by Cloudflare's own authentication. If you don't have a Cloudflare account yet, create one for free atdash.cloudflare.com/sign-up.
The first time you log in and create your sSystm account, the platform does the rest automatically: it sets up the backend databases and the connection to Cloudflare for you. You don't need to configure anything manually - everything is ready when you land in the workspace.
AI that works throughout the system – with you in control
sSystm does not treat AI as a chatbot in a corner. The assistant is connected viaMCP (Model Context Protocol)and can read and act on the entire workspace – CRM, projects, design tokens, components, documents and more. You can use the built-in Claude-powered Build module or bring your own AI (Claude, Cursor or any MCP client).
Crucial:every writing is human-gated.The agent stagnates actions as pending – nothing runs until you approve, and everything is logged. We explain what MCP is and why it changes the playing fieldWhat is MCP?
Free core - you only pay for what actually costs us
The entire core workspace is free, forever: CRM, Projects, Invoicing, Documents and Calendar. The only cost is the curated Build module library (à la carte) and AI usage (prepaid tokens). Your own components and your data are always free and always yours.
Beta now open: full access and free AI tokens
We are now activating the first beta tests. As a beta participant you getaccess to everything– every single module – both during the entire beta period and12 months ahead.
Also includedfree AI tokens toThe Build modulethroughout the beta, completely free of charge, for those of you who allow us to further develop the system based on log data. We use that datasolelyto fix bugs and improve the user experience – and we delete it accordingly.
The number of places in the private beta is limited and access is by invitation.Join the queue now →
Globally – with the EU and GDPR first
sSystm is launched globally but with a focus on the EU and GDPR protection first, and is released in four languages from the start:German, French, English and Swedish.The fact that the database is provisioned in your own account and can be locked to a jurisdiction makes data residency something you can prove, not just promise.
"Agencies have spent a decade renting back their own data from their tools. We turned that around. Your customers, your code, your cloud—in your account, in your region. And your AI isn't a chatbot in the corner; it works across the entire workspace across the MCP, with you in control of every decision."
— Zébulon Crantz, founder
About ZORC AB
ZORC AB is a Swedish digital agency (reg. no. 559481-8857) that builds sSystm. sSystm is built on Cloudflare's platform (Workers, D1 and Durable Objects), with data isolated per organization and locked to selected region. The market site is available atsystm.comand the private beta at app.ssystm.com.
Press contact
Zebulon Crantz, Founder –zebulon@zorc.se
Press:press@zorc.se
Sources
Do you want to join from the beginning?Join the waiting list here.
