The app platform behind ShadowCradle
Takelan builds shared services for identity, documents, customers, secrets, feature flags, and uptime. Connect ShadowCradle with one switch and use them without building your own.
What ShadowCradle customers can use
Connect your ShadowCradle organization to the platform. The link is optional.
Takelan SSO is included for connected organizations. The others are free* within platform limits.
*Free within platform limits. Usage beyond limits may be charged to maintain the platform.
Every product
Platform services and developer tools.
How the Cradle products use the platform
ShadowCradle, Firecradle, and Vcradle share one cloud control plane. When the link is on, it calls these services.
| ShadowCradle organization | Takelan SSO tenant | Mirrored one to one. SSO sign-in and user changes follow. |
| Key material | Secrets Manager | Extra copy per organization. The local copy always stays. |
| Organization and appliance events | Customer Desk account | Synced through a durable queue. ShadowCradle has a receiver for a signed deal-won event. |
| Customer and appliance support requests | Customer Desk tickets | Ticket shows the customer, the person, and the box. |
| Appliance asset records and agreements | Confidox | Asset registration and agreement acceptance. |
| Rollout flags | Featurettes | Each flag has a local default. |
| Appliances with a published URL | Healthcheck | Outside uptime evidence. Supporting only. |
Agents and appliances never call Takelan directly. They talk to the Cradle cloud, which talks to Takelan. ShadowCradle | Firecradle | Vcradle
Built so Takelan is never required
Connect with one switch. It is optional. Airgap works without it.
The rule
Nothing from Takelan may become load-bearing. Creating an organization, releasing a key, booting an appliance, and running a backup all work with every Takelan service unreachable.
How it holds
- The integration is off by default. When it is off, the cloud makes no outbound Takelan calls.
- The Airgap licence tier has no outbound traffic at all, and it works as sold.
- Machines stay local. Agents and appliances keep their licence and device credentials. SSO is for people only.
- If a Takelan service fails, a circuit breaker skips it and the cloud uses its local path.
- Writes that must not be lost, like Customer Desk account sync, go through a durable queue.
- Suspended organizations can still report a problem from an appliance.
See it
A look inside the Takelan app.




*Free within platform limits. Usage beyond limits may be charged to maintain the platform.
