The AI-native low-code platform built for

air-gapped, zero-trust enterprise deployments

The  AI-native low-code platform built for

air-gapped, zero-trust enterprise deployments

Build internal apps with AI and visual editing, then govern access with enterprise identity and audit controls. Fully offline operation, including licensing, requires the Self-hosted Enterprise air-gapped add-on.

Talk to our product experts
G2 High Performer
4.9/5 ⭐⭐⭐⭐⭐
41,000+ Stars
on GitHub
Enterprise Ready
SOC2 · GDPR · ISO · Self-hosted
OrangeSwisscomTencentisland.isPizzaPizzageolingoGojekClearScorebandwidth
Case Study
Case Study
Case Study

Enterprise-Grade Security and Compliance

ToolJet follows global standards including GDPR, SOC 2, and ISO 27001 to keep your data secure. It offers SSO, RBAC, encryption, and audit logs so teams can build safely with full IT control.

Access Control and Identity

Keep access tight and traceable across every workspace, app, and page.

RBAC and Granular Permissions

Uses built-in or custom roles with app-level and page-level controls. Scopes access for datasources and secrets.

Versioning and Releases

Syncs with Git branches and PR workflows. Moves apps from dev to staging to production with approval gates before publishing.

Directory and Policy Controls

Applies password and session policies via IdP, enforces workspace-level SSO, and manages custom terms and audit acceptance.

Single Sign-On (SSO)

Supports SAML 2.0, OpenID Connect, and OAuth2 with providers like Okta, Azure AD, Google Workspace, Auth0, Ping, and Keycloak. Enforce SSO-only logins, enable MFA via IdP, and apply session policies.

SCIM and Group Sync

Automates user lifecycle management with group-based role mapping and just-in-time (JIT) provisioning.

LDAP / Active Directory

Integrates with enterprise directories, syncs roles automatically, and maps groups to ToolJet roles for consistent access.

Compliance and Assurance

Operate with the certifications and controls your auditors expect.
Built for Enterprise Trust
  • SOC 2 Type II controls
  • ISO 27001 alignment
  • GDPR-ready data protection
  • Regular third-party penetration testing
  • Encryption in transit (TLS 1.2+/1.3) and at rest
  • DPA and data residency commitments
  • Vulnerability management (SLAs for CVEs)
  • Audit log retention windows & export to SIEM
Security and Procurement Pack
We provide a consolidated bundle for enterprise review (under NDA):
  • Pen-test summaries and remediation
  • Security policies and controls overview
  • Architecture and data-flow diagrams
  • Business continuity and incident response
Request the pack
View security docs

Deployment Options

Choose how you deploy ToolJet - from fully managed SaaS to air-gapped environments.

ToolJet Cloud
Fully managed SaaS offering hosted and operated by ToolJet, Automatic updates, security patching, and scaling included, Ideal for teams that want zero operational overhead.
Managed Hosting
ToolJet sets up and maintains deployments in your chosen cloud provider and region, We manage upgrades, patches, and monitoring under your security policies, Supports AWS, Azure, GCP, OpenShift, and private cloud environments.
Air-Gapped Self-Hosting
Deploy ToolJet in fully isolated networks - no outbound internet required, Supported setups include ECS, EKS, AKS, Cloud Run, Kubernetes, and Docker, Perfect for regulated industries needing complete data control.
Marketplace Availability
Available directly on AWS Marketplace and Azure Marketplace, Procure using your existing enterprise billing and compliance workflows, Verified listings ensure faster vendor onboarding and security validation.
Built for Uptime and Control
ToolJet deployments support high availability, zero-downtime upgrades, and secure integration with your existing infrastructure - from private VPCs to Kubernetes clusters.

Modern & AI-native alternative to legacy low-code platforms

ToolJet delivers the speed of low-code with the governance, compliance, and deployment flexibility enterprises expect - reimagined for the AI era with self-hosting, air-gapped deployments, and bring-your-own LLMs.

Book a demo

Data and Secrets Protection

Secrets and Identity Management
  • Least-privilege connections to DBs and APIs
  • Secrets management for credentials and env vars
  • Rotation policies and short-lived tokens
  • Field-level masking and log redaction where applicable
Network and Runtime Security
  • TLS everywhere; HSTS and modern ciphers
  • IP allowlisting and workspace-level network rules
  • Optional private networking and egress controls
  • Container isolation and signed images

Auditability and Monitoring

Prove who did what, when and why.

Audit Logs
  • Auth, config, deploys, and data events
  • User, timestamp, and change details
Release History
  • Version lineage and approver identity
  • Rollback to known-good versions
Observability
  • SIEM integrations(Splunk, Datadog, Elastic)
  • API access logs and session tracking
ToolJet can stream audit logs from Rsyslog to SIEM tools like Datadog for centralized log management, monitoring, and analysis.

Enterprise Operations

Enterprise-Grade Reliability
  • High Availability (HA) and Disaster Recovery (DR) patterns
  • Backups/restore with clear RPO/RTO guidance
  • Multi-workspace management for large orgs
  • Branding and white-label options
SLAs and Support
  • Custom SLAs and named support
  • 24×7 incident response
  • Optional private networking and egress controls
  • Enterprise onboarding and success playbooks

Frequently asked questions

Which governance controls are available in ToolJet?
ToolJet supports roles and permissions for apps and resources. Team includes SSO, audit logs and GitSync. Enterprise adds SCIM provisioning and multiple deployments. Match your plan to the identity, release and audit controls your team needs, and test those controls with a representative app before rollout.
Do app permissions replace access rules in our database?
No. App and resource permissions control access within ToolJet. For an external database or API, enforce sensitive record restrictions on the server side using scoped credentials, queries or the source system's policies. Hiding a page or button is not a substitute for authorizing the underlying operation.
Does ToolJet support fully offline, air-gapped installs?
Yes, when your Self-hosted Enterprise plan includes the air-gapped deployment add-on. ToolJet supports offline operation and offline licensing in that configuration.
Can we enforce SSO-only access and MFA?
Yes. Enforce SSO at the workspace level; MFA follows your IdP policies.
How are secrets stored?
ToolJet encrypts data-source credentials with AES-256-GCM. Configure separate credentials for each environment. On Self-hosted deployments, protect encryption keys and deployment secrets as part of your backup and recovery process.
Do you have pen-test reports and security documentation?
Yes. We share current reports and security documentation under NDA during procurement.