Built with security as a default.
Tadabase AI inherits the security model Tadabase has shipped for years. Real RLS, real audit logs, real tenant isolation. Plus the AI-specific protections every AI builder needs but few have.
Data protection
Encryption, isolation, backups.
- Encryption in transit
- TLS 1.2+ on all traffic
- HSTS preload
- Encryption at rest
- AES-256 for database
- AES-256 for backups
- Tenant isolation
- Per-tenant containers for every Tadabase AI app
- RLS to the backend
- JWT carries identity end-to-end
- Enforced server-side
- Backups
- Daily encrypted backups (Business+)
- 30-day PITR on Enterprise
Authentication & authorization
Who you are. What you can touch.
- Email/password + 2FA
- Optional TOTP
- SSO
- Google, Microsoft, Okta, SAML
- SCIM on Enterprise
- Magic-link login
- For end users on your apps
- RBAC + custom roles
- Field-level access
- Per-record RLS rules
- Audit trail
- Per-app and per-record
- Exportable on Business+
AI-specific protections
Guardrails most AI builders skip.
- Sandboxed workspace
- Per-project agent workspace
- npm allow list
- Restricted package set
- Pre-deploy security pass
- Catches committed secrets
- Flags missing auth
- Cost caps
- Per-run, per-day and per-month
- No model training
- We never train Anthropic models on your prompts or data
Operational
How we keep the lights on.
- 24/7 monitoring
- Platform-wide
- Public status page
- status.tada.app
- DR exercises
- Quarterly
- Incident response
- 60-minute initial response target
- Pen testing
- Third-party annually
- Summary available under NDA
- Vulnerability disclosure
- Report issues to security@tada.app
Compliance.
Need a DPA, a BAA, a security questionnaire, or a sub-processor list? Email security@tada.app and we’ll respond within one business day.
- SOC 2 guidelines
- We build and operate to SOC 2 guidelines. We are not currently audited against them and do not hold a SOC 2 report; ask us for the current control status.
- HIPAA
- Eligible plans with signed BAA. Business+ & Enterprise.
- GDPR
- DPA on request. EU sub-processor list published.
- CCPA aligned
- California residents’ rights honored.
- Sub-processors
- Current list available on request.
Bring your business into the world of AI.Launch a real app today.
Describe what your business needs. Tadabase AI builds it on a real backend, hosts it and puts it on a real domain, ready for your team and your customers.
- Free plan, no card
- Unlimited app users
- Live on your own domain