Yup. You are sandboxed for certain activities, but you can certainly create outbound requests for talking to databases or APIs