Appifio Aura is an integrated backend and CMS platform: smart storage, content management, admin permissions, multi-layer security — ready for websites, shops, and web applications.

AURA — THE WEBSITE AND APPLICATION PLATFORM YOU'VE ALWAYS WANTED

Have you ever dreamed of a place that is beautiful, powerful, and secure — a place where a website isn't just "present online" but truly operates like a real business? Aura was born to make that a reality. This is not an ordinary web-building tool. This is the underlying platform system — the invisible heart — that makes everything you see on the screen come alive, intelligent, and trustworthy.

IMAGINE A SMART HOME

A website is like the facade of a house: beautiful, tidy, easy to enter. But what makes a house durable and safe lies in the electrical system, plumbing, door locks, cameras — things you don't need to see every day but cannot do without.

Aura is that "backstage" part.

The part you and your customers see: a stunning homepage, an engaging blog, a neat store, a contact form that works instantly.

The part Aura handles: storing data neatly, processing all operations behind the scenes, protecting sensitive information, and ensuring everything runs smoothly whether you have thousands of articles or hundreds of orders.

No need to understand the machinery inside. You just need to know: everything "takes care of itself" — professional, stable, reliable.

AURA CMS — MANAGE CONTENT LIKE A REAL BUSINESS

Aura doesn't just give you a website. Aura helps you run a website like an organization with processes.

You want to publish posts, sell products, receive inquiries, create an about page, or even build custom content types for your industry — Aura CMS is ready. Everything is clearly organized: each content type has its place, each page has its role, each link leads customers exactly where they need to go.

What makes Aura CMS different is its meticulousness.

No clutter. No mess. No "fix it later" approach.

You open the dashboard and immediately see what needs to be done: write a post, publish a product, view new inquiries, customize the interface, manage collaborators. Every action has its place — like an office designed from the start, not a makeshift desk corner.

And as your business grows, Aura grows with it.

Today you only need a blog. Tomorrow you add a shop. The next day you add job listings, real estate, courses — the system expands with you without having to rebuild from scratch. That's the platform mindset: build once, grow forever.

THE INTELLIGENCE BEHIND — HANDLING THINGS "NOT MEANT TO BE EXPOSED"

Every professional website has sensitive tasks: passwords, service connection keys, order processing, sending notifications, checking access permissions...

Aura is designed with a golden rule: what is important and sensitive is handled behind the scenes, in a protected environment — never exposed for strangers to see.

Visitors to the website only see the results: form submitted successfully, products displayed beautifully, articles loading quickly.

You and your team feel at ease: everything is processed in the right place, with the right permissions, in the right way.

This is the line between a "fun DIY" website and a system robust enough for customers, partners, and investors to trust with their data.

SECURITY IS NOT AN ADVERTISEMENT — IT'S A COMMITMENT IN ACTION

In an era where everyone fears data leaks, Aura does not treat security as a secondary feature.

Clear permission system: who can view, who can edit, who can only write posts, who manages everything — each role has its own limits, no one exceeds their assigned scope.

Sensitive information is kept hidden behind the scenes, used only when truly necessary — not floating on the interface or in the hands of unrelated people.

When there are signs of unusual access — repeated failed logins, excessive requests — the system automatically locks temporarily to protect itself. Silent, fast, no manual intervention needed.

And more importantly: Aura does not "tell" attackers where vulnerabilities are. When there's an issue, users see a polite notification — technical details remain within the system, where only the right people know.

That's enterprise security: not noisy, but always on guard.

PROFESSIONALISM IN WHAT PEOPLE DON'T NOTICE — BUT FEEL IMMEDIATELY

Professionalism isn't just a beautiful interface.

Professionalism is a page that is never "blank" when you start — the system is ready to receive new data without throwing confusing errors.

Professionalism is always correct links — customers clicking on articles, products, categories all land on the right page, never getting lost.

Professionalism is multiple people managing without stepping on each other's toes — editors write posts, managers approve content, business owners see the big picture.

Professionalism is when the website gets busy, everything stays tidy — data is intelligently organized behind the scenes, not heavy, not slow, not messy.

You don't need to see that mechanism. You just need the feeling: "Oh, this is really well done."

Aura delivers that feeling — from the very first login.

AI AND THE FUTURE — NOT JUST A TREND, BUT A REAL ADVANTAGE

Aura is built with a modern mindset: not just serving people today, but ready for the way we work tomorrow.

When you want to expand, customize, or have an intelligent assistant help build content and workflows — the platform already has the framework ready, clear rules, no chaos.

You are not left behind by technology. You stand on prepared ground — and focus on what matters most: customers, brand, revenue.

WHO IS IT FOR?

Aura is for you if:

• You are an online shop owner who wants to sell without worrying about the system "crumbling" when orders increase.
• You are an agency or freelancer wanting to deliver deep solutions to clients — not just a pretty skin.
• You are a business needing a website with a portfolio, blog, job listings, landing pages — all in one place.
• You have been disappointed by beautiful websites that are messy to run, weak on security, and require rebuilding to scale.
• You want to try — and feel the difference from the very first actions.

ONE SINGLE QUESTION

Is your website today a poster — or a real office online?

If you want a real office — with processes, security, room to grow — Aura is waiting for you to step in.

No empty promises. No vagueness. Just one invitation: come, touch it, create your first page, publish your first post, receive your first inquiry — and ask yourself: "Why didn't I have this before?"

Aura is not just a platform.

Aura is the feeling that you've finally found it: building websites is no longer a burden — but a true competitive advantage.

Try it today. You'll understand why those who have experienced Aura never want to go back to the old way.

AURA — System Overview

Aura is an integrated backend and CMS platform for websites, landing pages, and web applications on Appifio. The system consists of two complementary layers: Aura Storage handles server-side storage, API, and security; Aura CMS enables content, interface, and site management without deep infrastructure intervention.

Smart Storage (Aura Storage)

Aura Storage manages data in two tiers. The virtual data tier (vdisk) stores structured JSON: articles, products, orders, contacts, site settings… The physical filesystem tier stores HTML, CSS, JavaScript, images, and attachments. The two tiers are separate but synchronized via a unified API — applications call a standard set of methods instead of handling scattered files manually.

For large lists (blog, shop, form), Aura uses automatic sharding: data is divided behind the scenes, while the site still reads/writes through a single logical file. Dataset growth does not slow down or complicate the user's workflow.

API and Data Model

The client (website, admin panel) communicates with the backend via the App Storage Client — a pre-injected library, no rewriting needed. The API supports reading/writing single files (flat) for configuration; reading lists, adding, editing, deleting records (indexed) for multi-item content; filesystem operations for templates and assets; route slug management; admin authentication; image/file upload; and calling backend functions for sensitive server-side logic.

On first use with no data, the system returns empty instead of an error — suitable for deployment from scratch without complex exception handling.

Aura CMS — Content Management

When CMS is enabled, all content types are defined in a manifest: data file name, schema fields, public route, admin interface. Standard entities include articles (blog), products and orders (shop), contacts, static pages, categories, and tags. Site owners can declare custom data types via the Panel — the system automatically generates the manifest, JSON file, HTML template, and corresponding route.

The CMS Panel provides an admin interface: editing, uploading, publishing, route management, site settings (maintenance mode, upgrades, contact form), themes, and security. The UI contract defines DOM hooks and standard classes to synchronize templates with the panel.

Routing and Visitor Experience

Each content item has its own URL via the route system: article slug, category, tag, shop page, custom page… Routes are linked to HTML templates on the filesystem — visitors opening the correct URL see the right interface and data. Aura handles routing, templates, and data reading API in a unified flow.

Admin Authentication and Authorization

Aura has a multi-role admin login system. Superadmin has full access and manages accounts; admin can CRUD content, routes, files, and upload; user (editor) can create/edit content but is restricted from deletion and system settings. Guest (visitor) can only read public content and submit forms via append (contact, orders) when the entity allows.

Admin sessions store tokens scoped per app; passwords are handled server-side. No direct read/write of auth files — all operations go through dedicated APIs.

Backend Functions and Secret Management

Sensitive logic (API keys, payment tokens, sending emails…) runs in backend functions — JavaScript server-side in an isolated sandbox, not exposed to the browser. Secrets are stored encrypted/server-side; only backend functions can read them; the client receives processed results, never seeing raw values. Site owners manage secrets via App Editor / Secrets Manager.

Security and Rate Limiting

Aura enforces authorization based on token and role; blocks direct access to system files (login, shard index, routes…). Optional security enforcement tightens guest permissions: filters public records, hides sensitive fields, restricts public forms per entity.

Rate limiting and IP blocking protect against spam and brute-force: mutations, login failures, backend functions, and repeated authentication requests all have thresholds; exceeding the threshold results in temporary IP blocking. The client only receives a generic blocked signal, no internal details are exposed.

Shop, Blog, and Interaction

The blog supports categories, tags, articles, views/likes (engagement). The shop has products, cart, guest checkout via order append; admin processes orders afterward. Contact forms write to the contacts entity — public submission does not require login when configured to allow it.

Expansion and Deployment

Aura is suitable for simple sites (CMS off, custom file naming) to complex portals (CMS on, custom entities, themes, security enforcement). The App Editor supports editing templates, backend functions, secrets, and preview. Standardized API documentation helps AI developers and technical teams generate code that follows conventions without breaking security policies.

In summary, Aura is a full-stack solution for site owners and agencies: structured storage, flexible CMS, unified API, multi-layered security, backend functions for deep logic — all in one platform, ready to scale from landing pages to shops and large content portals.