Access and provisioning requests
Requests, approvals, temporary grants and automatic revocation, with a decision trail.
For IT and security leaders
Internal tools built with IT oversight
Departments will build their own tools; the question is where. ToolJet gives them an AI-assisted builder that lives inside your identity, permissions and audit controls, on infrastructure you choose. Shadow spreadsheets become governed apps.
- Replace shadow IT
- Self-host or air-gap
- One identity for every app
Access requestsPending · all systemsSSOAudit onProduction
Open requests183 over SLA
Approved this week92median 26 min
Auto-revoked14expired temporary access
| Request | Requester | Approver | Status |
|---|---|---|---|
| Read access · billing DB | A. Chen | Data platform | Approved |
| Admin · CRM sandbox | R. Patel | IT ops | In review |
| Prod deploy rights | J. Moreau | Platform eng | Denied |
| Temporary VPN · vendor | K. Adeyemi | Security | Approved |
Expire any temporary access after 7 days and post the revocation to #security-audit
Scheduled workflow and Slack query added · awaiting your review
41,000+stars on the open-source core
SOC 2 Type IIISO 27001 and GDPR · Visit the trust centre
Your infrastructureCloud, VPC, on-premise or air-gapped
100+ connectorsplus any REST or gRPC endpoint
No engineering ticket needed
Describe the tool you need. ToolJet builds it.
Type what you want in plain language. ToolJet generates the pages, queries and logic as a working app. Connect your data, set who can see what, and review the generated logic before publishing. Edit the app on the canvas afterwards.
- Working app, not a mockup
- Review access rules before publishing
- Free to start, per-builder pricing
Connects to the systems IT already runs
Microsoft 365
SharePoint
Jira
Slack
PostgreSQL
REST API
Zendesk
Google Sheets
Have developers? They can build the same apps from
through the ToolJet plugin
What IT teams build, and what they let others build
Asset and licence management
Hardware, software and licence registers with owners, renewals and audit exports.
Onboarding and offboarding
Checklists that read from your directory and write to ticketing, so no account is left behind.
Incident and change records
Lightweight change and incident logs where a full ITSM suite is overkill.
Governed apps for other departments
Finance, HR and operations build their own tools inside your controls instead of in spreadsheets and SaaS trials.
Compliance evidence
Exportable audit logs and permission reports that answer auditor questions without a scramble.
How a rollout usually goes
- 01
Choose the boundary
ToolJet Cloud, your VPC, on-premise or fully air-gapped. Docker, Kubernetes, Helm and OpenShift are supported.
- 02
Connect identity
Configure the supported identity provider on your chosen plan. Enterprise adds SCIM and directory group sync; test role mapping, onboarding and access removal with representative accounts.
- 03
Configure and test access
Assign builder and resource permissions, use scoped data-source credentials, and enforce sensitive record access in server-side queries, database policies or APIs. Test denied requests as well as successful ones.
- 04
Review before expanding
Pilot with one department, assign an app owner and review queries, writes and permissions before release. Document the change process and test offboarding and recovery before expanding access.
In production
Teams already running on ToolJet
Security review, answered
The controls your questionnaire asks about
SOC 2 Type II, ISO 27001 and GDPR, with the details in the trust centre. TLS protects data in transit, and AES-256-GCM encrypts data source credentials.
SSO and SCIM
SAML, OIDC and LDAP on Team and above; Enterprise adds directory group sync and SCIM provisioning and deprovisioning.
Permissions to the query
Configure app and resource permissions. Enforce sensitive record access in server-side queries, database policies or APIs; hiding a component is not a data-access control.
Audit logs and SIEM export
Review platform event coverage, retention and export options for your plan. Store business decisions in your connected system and test the evidence your audit process requires.
AI inside your boundary
Builder BYOK is available on Enterprise plans for both Cloud and Self-hosted. A customer-hosted AI gateway is a separate Self-hosted Enterprise add-on. Use the gateway with a supported local model to keep inference inside your network; external BYOK providers still receive requests.
Security and governance features vary by plan. Workflows and Agent Builder are available on Self-hosted only; BYOK is available on Enterprise plans for both Cloud and Self-hosted. Compare plan availability.
See the full control model Visit the trust centre Deployment options AI security and deployment controls
Two ways to get there
Build it yourself, or bring our engineers in
Self-serve
Your team, your pace
Start free. Describe the tool, refine it on the canvas, and ship it under your own access rules. Start with one app, then test it with your team before rolling it out.
Start free
Professional services
Forward-deployed engineers, embedded with your team
When the timeline is fixed or the process is tangled, our engineers build alongside you: scoped delivery, production-ready apps, and knowledge transfer so your team owns the result.
Talk about a projectFrequently asked questions
Where does our data live?
Wherever you deploy ToolJet. Self-host in your VPC or on-premises, with an Enterprise add-on for air-gapped deployment. External AI providers and connected services can receive data according to your configuration. On ToolJet Cloud, data source credentials are encrypted and queries run server-side; a data processing agreement and regional options are available.
Does the AI send our data to a model provider?
Default managed AI routes requests through ToolJet AI Cloud to model providers. Builder BYOK is available on Enterprise plans for both Cloud and Self-hosted. A customer-hosted AI gateway is a separate Self-hosted Enterprise add-on. Internal inference requires that gateway with a supported local model; BYOK alone does not keep requests inside your network. Review the data flow for the setup you choose.
How do we control what non-technical builders can do?
Configure permissions for app editing, release and data-source access on the selected plan. Treat builder permissions and end-user data access as separate checks: a shared database connection does not automatically inherit each employee’s database permissions. Enforce record-level restrictions server-side and test both authorized and denied requests. Have technical maintainers review SQL, API writes, custom code and permission changes before production.
Is there an audit trail for compliance?
Platform audit logs and business decision records serve different purposes. Confirm which platform events, retention periods and export options your plan covers. Design approval records in your connected database or system of record to capture the request, decision, actor and time. Test that evidence against your audit requirements; platform logs alone do not establish application compliance.
How is ToolJet itself secured?
SOC 2 Type II, ISO 27001 and GDPR, regular penetration testing, TLS in transit and AES-256-GCM encryption for data source credentials. Reports and the security policy are in the trust centre.
Give the business a builder you can stand behind
Walk through deployment, identity and audit on a call with an engineer. Bring your questionnaire.
Page updated