Encryption in transit
ToolJet uses TLS to encrypt data transmitted between users and its servers, protecting information as it moves.
ToolJet Security
Trust and Security
Protect your data with encryption, access controls, and security practices across the application lifecycle. Choose where your apps and AI run, with deployment options that fit your requirements.
Visit the ToolJet Trust CenterBuilt for your security review
Trust you can verify.
Review SOC 2 audit information, ISO 27001, and GDPR compliance resources in our Trust Center.
Explore our controls and policiesSecurity across your application lifecycle
Protect your data.
Control who can access it.
ToolJet combines encryption, role-based permissions and auditability for internal apps built visually, with AI or through coding agents. Match the controls to your plan, review generated queries and test access before releasing an app.
Encryption at rest
Sensitive data stored on ToolJet's servers is encrypted at rest. For Self-hosted deployments, configure storage and infrastructure protections for your environment.
Role-based access
Control access to apps and resources with role-based permissions. Give users and connected accounts only the access they need. Enforce sensitive data restrictions in your database or API as well as the app.
Authentication and access controls
AES-256-GCM credential encryption
Data source credentials are encrypted using AES-256-GCM and are not shared with AI servers or model providers. On Self-hosted deployments, they remain inside your deployment.
Credential security details
Audit trails and monitoring
Use the audit logging and observability controls available for your plan to review activity and support security monitoring. Set appropriate access and retention for logs.
Retention and deletion
Our privacy policy explains data collection, use, retention, and deletion requests, including applicable legal retention requirements. Contact us to request deletion of your account or personal information.
Read the privacy policySecurity is an ongoing practice
Review our security controlsPrepare, monitor,
and respond.
Incident response
We monitor our systems for suspicious activity and security incidents. Our response plan covers containment, communication with affected parties, and remediation to help prevent recurrence.
Secure development practices
Our Trust Center documents change-management and application security controls. For your own apps, review changes before release, separate development from production, and keep deployment dependencies up to date.
Review the app release lifecycleShared responsibility
Your part in a secure deployment
Protect your accounts and maintain the infrastructure you operate.
- Use strong, unique passwords and two-factor authentication.
- Review permissions for users and connected data sources.
- Keep devices, applications, and Self-hosted infrastructure updated.
AI on your terms
Choose where your AI runs.
Private AI depends on three choices: where ToolJet runs, where the AI gateway runs, and where the model processes requests. Self-hosting the app platform alone does not keep AI requests inside your network.
Managed gatewaySee how it connects
Self-host ToolJet.
Use our AI gateway.
Run ToolJet on your infrastructure and send AI requests outbound to ToolJet's hosted gateway.
- Your deployment initiates the connection
- Key-authenticated requests
- No gateway-initiated inbound access
Enterprise add-onsDiscuss deployment
Keep AI on
your infrastructure.
Deploy the AI gateway on-premises and connect a supported model endpoint inside your network.
- On-premises AI gateway add-on
- Bring your own keys (BYOK) add-on
- Local model endpoint for internal inference
Builder BYOK is available on Enterprise plans for both Cloud and Self-hosted. Requests use ToolJet's managed AI server with your provider keys and do not consume ToolJet AI credits; provider usage is billed separately. On-premises gateway hosting is a separate Self-hosted Enterprise add-on. Fully internal inference also requires a supported local model endpoint.
Connection direction
Outbound by design.
The gateway cannot initiate a connection into your deployment. Replies return over the connection your deployment opens.
Your infrastructureToolJet deployment
Key-authenticatedOutbound connection
ToolJet hostedAI gateway
Outbound-only connectivity controls network access, not request contents. AI requests can include context from the data sources you make available. Review AI data usage.
Your data is not training data
ToolJet does not use customer data to train or improve AI models, and does not permit its third-party LLM providers to do so.
AI data usage policyControl the context AI receives
Requests can include prompts, app context, schemas, and data read through connected credentials. Restrict data-source permissions; discovery is not limited to schemas. Treat logs containing prompts or responses as sensitive.
Example deployment isolation
Deployment guideSeparate environments.
Controlled releases.
Enterprise plans include multiple deployments. Run development, staging, and production as separate ToolJet instances, with AI enabled or disabled for each deployment.
- AI enabled
Development
Build with AI using test or sanitized data and limited data-source permissions.
- AI disabled
Staging
Pull app definitions with GitSync. Configure staging credentials and test before release.
- AI disabled
Production
Promote reviewed apps with production-only credentials and controlled access.
Promote apps with GitSync. Configure secrets separately in each deployment.
Self-hosted Enterprise add-on
Plan an air-gapped deploymentNo internet.
Still ToolJet.
With the air-gapped deployment add-on, ToolJet runs without internet access—including its licensing system.
- Platform operation
- Offline
- License validation
- Offline
- AI, if enabled
- Local gateway + model
Keep required data sources, identity services, and Git repositories within your isolated network.
Running with restricted outbound access instead?
For ToolJet-managed AI, allow outbound HTTPS to api-gateway.tooljet.ai and python-server.tooljet.ai, as listed in the AI setup guide. Your selected data sources, model endpoints, Git hosts, email services, and identity providers may require additional access.
Environment variables let you disable telemetry, update checks, and other optional outbound features. Review the configuration reference for your release.
Frequently asked questions
How can enterprise teams govern apps built with AI or coding agents?
ToolJet AI and coding agents connected through ToolJet MCP create native app configurations that remain editable in the visual builder. Review generated queries and permissions, restrict connected credentials, and test releases before production. Team includes SSO, audit logs and GitSync; Enterprise adds SCIM and multiple deployments. Your team remains responsible for reviewing each app and configuring the controls available on its plan.
How does ToolJet protect data in transit and at rest?
ToolJet uses TLS for data transmitted between users and its servers and encrypts sensitive data stored on its servers at rest. Data source credentials are encrypted using AES-256-GCM. Self-hosted customers configure the network, storage, and access protections for their own infrastructure.
How can we control access and review activity?
Use role-based permissions to control app and resource access, then review platform activity through audit logs. Team includes SSO, audit logs and GitSync; Enterprise adds SCIM provisioning. Check your plan for retention and export options. For external databases, also enforce the required access rules in server-side queries, database policies or APIs; hiding a component is not a data-access boundary.
How can I request deletion of my account or personal information?
Contact hello@tooljet.com to request deletion of your account or personal information. Our privacy policy explains the request process, retention practices, and applicable legal requirements.
Can ToolJet AI run entirely on our infrastructure?
Yes. Self-hosted Enterprise offers an on-premises AI gateway add-on. BYOK is available on Enterprise plans for both Cloud and Self-hosted but does not make inference local. Use the gateway with a supported model endpoint hosted inside your infrastructure to keep AI processing internal. BYOK with an external model provider still sends requests to that provider.
Can ToolJet's hosted AI gateway initiate a connection to our deployment?
No. Your Self-hosted deployment initiates the outbound connection and authenticates with a key. The hosted gateway cannot initiate an inbound connection to your deployment. Responses return over the deployment-initiated connection; AI requests can still carry the context needed to complete the task.
Can we enable AI in development and disable it in production?
Yes. Enterprise plans include multiple deployments. Run separate development, staging, and production instances, enable AI only in development, and promote app definitions through GitSync. Configure each instance's data sources and secrets separately. Apps that call external AI services at runtime still need those services, or must have those features removed.
Can ToolJet run without internet access, including licensing?
Yes, when your Self-hosted Enterprise plan includes the air-gapped deployment add-on. ToolJet supports offline operation and offline licensing in that configuration. Keep required services inside the isolated network, and use a local gateway and supported local model endpoint if AI is enabled.
Where can our security team review ToolJet's controls and compliance information?
Visit the ToolJet Trust Center for compliance information, security controls, AI security posture, and policy resources. Contact our team to review the deployment architecture and Enterprise add-ons required by your organization.
Make security part of your deployment plan.
Review your requirements and Enterprise add-ons with our team.