Built with security as a default.
Tadabase AI inherits the security model Tadabase has shipped for years. Real RLS, real audit logs, real tenant isolation. Plus the AI-specific protections every AI builder needs but few have.
Data protection
Encryption in transit
- TLS 1.2+ on all traffic
- HSTS preload
Encryption at rest
- AES-256 for database
- AES-256 for backups
Tenant isolation
- Per-tenant containers for every Tadabase AI app
RLS to the backend
- JWT carries identity end-to-end
- Enforced server-side
Backups
- Daily encrypted backups (Business+)
- 30-day PITR on Enterprise
Authentication & authorization
Email/password + 2FA
- Optional TOTP
SSO
- Google, Microsoft, Okta, SAML
- SCIM on Enterprise
Magic-link login
- For end users on your apps
RBAC + custom roles
- Field-level access
- Per-record RLS rules
Audit trail
- Per-app and per-record
- Exportable on Business+
AI-specific protections
Sandboxed workspace
- Per-project agent workspace
npm allow list
- Restricted package set
Pre-deploy security pass
- Catches committed secrets
- Flags missing auth
Cost caps
- Per-run · per-day · per-month
No model training
- We never train Anthropic models
- on your prompts or data
Operational
24/7 monitoring
- Platform-wide
Public status page
- status.tada.app
DR exercises
- Quarterly
Incident response
- 60-minute initial response target
Pen testing
- Third-party annually
- Summary available under NDA
VDP
- security@tada.app
- PGP key on page
Compliance & certifications.
Need a DPA, a BAA, a security questionnaire, or a sub-processor list? Email security@tada.app and we'll respond within one business day.
SOC 2 guidelines
We build and operate to SOC 2 guidelines. We are not currently audited against them and do not hold a SOC 2 report; ask us for the current control status.
HIPAA
Eligible plans with signed BAA. Business+ & Enterprise.
GDPR
DPA on request. EU sub-processor list published.
CCPA aligned
California residents' rights honored.
Sub-processors
Always current at /sub-processors.
Bring your business into the world of AI.
Launch a real app today.
Describe what your business needs. Tadabase AI builds it on a real backend, hosts it and puts it on a real domain, ready for your team and your customers.
Start Building