Air-gapped Deployments
Run in your own cloud or data center with full infra control.
Compare governance, AI model choice and deployment control for your enterprise. ToolJet combines SSO, audit logs and GitSync with self-hosting options. Self-hosted Enterprise adds SCIM, multiple deployments and dedicated support, with BYOK available on Enterprise plans for both Cloud and Self-hosted, and customer-hosted AI and air-gapped operation available as separate Self-hosted Enterprise add-ons.
| ToolJet | Zoho Creator | |
|---|---|---|
| Governance | ✓ SSO, audit logs and GitSync; SCIM on Enterprise | ✓ Roles, SAML SSO and audit trails |
| AI Control | ✓ Builder BYOK: Enterprise (Cloud or Self-hosted); private gateway: Self-hosted Enterprise add-on | ✓ Zia BYOK on paid Cloud plans; on-premise restrictions apply |
| Self-Hosting | ✓ Free, Team and Enterprise plans | ✓ Commercial On-premise edition |
| Source Access | ✓ Community Edition (AGPL-3.0) | ✗ Proprietary platform |
| End User Pricing | ✓ Unlimited end users on Enterprise | ✓ Internal-user subscriptions; Flex quotes available |
Trusted by teams at
Start with identity, data access, AI processing and release controls. Features depend on the plan and deployment. Builder BYOK is available on Enterprise plans for both Cloud and Self-hosted. ToolJet Cloud does not include private connectors, Workflows or Agent Builder.
| Feature | ToolJet | Zoho Creator |
|---|---|---|
| Security & Access Control | ||
| SSO (SAML/OIDC) | Yes; from Team plan | Yes; SAML 2.0 |
| RBAC | Built-in + custom roles | Yes, granular permissions |
| SCIM 2.0 Provisioning | Yes (Enterprise) | Not documented |
| LDAP / Active Directory | Yes | Via Zoho Directory |
| Audit Logs | Yes (Team and Enterprise) | Record history, print and export audit trails; review retention and scope |
| Secrets Management | AWS Secret Manager, Azure Key Vault, GCP Secret Manager, HashiCorp Vault | Review edition-specific capabilities |
| AES-256-GCM Encryption | Yes | Encrypted at rest and in transit |
| MFA | Via IdP policies | Yes; TOTP |
| Directory Group Sync | Enterprise group sync, automatic assignment and SCIM | Roles and directory controls; validate provisioning requirements |
| Fine-Grained Access | Enterprise controls for pages, components, queries and rows | Permission sets and role hierarchies; validate data and action scope |
| Deployment Isolation | Multiple deployments on Self-hosted Enterprise; separate secrets and data sources per instance | Cloud developer environments; On-premise lifecycle capabilities differ |
| Dedicated Support | Enterprise dedicated support manager; agree escalation and rollout needs | Separate Enterprise support tier with a technical account manager |
| AI Capabilities | ||
| AI App Generation | Generate and refine multi-page apps with AI | CoCreator and Zia-assisted app development |
| Model Provider Choice | Choose supported providers and compatible models for your AI setup | Zia supports Zoho, OpenAI, Google and Anthropic; regional restrictions apply |
| Builder BYOK | Enterprise (Cloud or Self-hosted) | Zia BYOK on paid Creator 6 plans; provider charges apply |
| Customer-Hosted AI | Customer-hosted gateway is a Self-hosted Enterprise add-on; validate supported model endpoints | On-premise AI fields and AI tasks differ from Cloud; confirm the required AI configuration |
| AI Data Boundary | External BYOK providers still receive requests; internal inference needs a supported local endpoint | Review the selected provider, region and data flow for each Zia feature |
| AI Inside Applications | Connect AI provider APIs; use self-hosted workflows for orchestration | AI fields, custom AI models and Zia agents; deployment restrictions apply |
| Coding-Agent Workflow | ToolJet MCP connects compatible coding agents to app building | Evaluate agent tooling and permissions for the chosen Creator edition |
| AI Costs | Managed AI credits or your provider's billing, depending on setup | Provider billing and feature limits depend on the Zia configuration |
| Deployment Options | ||
| Cloud (Managed SaaS) | Yes | Yes |
| Docker / Docker Compose | Yes | Confirm support for the commercial On-premise edition |
| Kubernetes | Yes | Confirm support for the commercial On-premise edition |
| AWS / Azure / GCP | Yes; EC2, ECS, EKS, AKS, ACI, Cloud Run, GKE | Zoho Cloud or commercial On-premise; validate the target infrastructure |
| Helm Charts | Yes | Confirm support for the commercial On-premise edition |
| Air-Gapped | Fully offline with the Self-hosted Enterprise add-on | Confirm support for the commercial On-premise edition |
| On-Premise | Yes; Community Edition and commercial self-hosted plans | Commercial On-premise; AI fields, AI tasks and some integrations differ from Cloud |
| Self-Host on Free Plan | Yes | Commercial On-premise pricing requires a quote |
| Developer Experience | ||
| Primary Language | JavaScript and Python; industry-standard, portable skills | Deluge for business logic; platform-specific app definitions |
| Custom Code | JavaScript queries and event handlers; Python queries for custom logic | Deluge scripts, Java/Node.js cloud functions and widgets |
| Custom Components | Yes, via React components | Widgets via HTML/CSS/JS SDK |
| Git Sync | Git-based app promotion (Team and above) | Cloud developer environments; assess Git-based promotion requirements |
| Multi-Environment | Self-hosted Team and above; Cloud Enterprise | Dev / Stage / Production |
| API Generation | Query connected APIs and databases; ToolJet APIs for platform operations | Auto-generated REST and XML-RPC APIs per app |
| Plugin SDK | Custom React components; ToolJet CLI for custom data sources on Self-hosted | Widgets and custom connectors; different extension model |
| OpenTelemetry | Self-hosted observability integrations; configure your monitoring stack | Review edition-specific capabilities |
| Vendor Lock-in | Open-source platform; JavaScript/Python skills transfer, app definitions remain ToolJet-specific | Deluge logic and blueprints need rewriting to move platforms |
| Core Platform | ||
| Visual App Builder | Drag-and-drop with 78+ components | Drag-and-drop form and page builder |
| Built-in Database | ToolJet Database (PostgreSQL-backed, no-code UI) | Built-in relational database with form-based data entry |
| Workflow Automation | Visual JS/Python workflows (self-hosted only) | Blueprints (visual), Deluge scripts, Flows |
| Scheduled Jobs | Via workflow scheduler (self-hosted only) | Custom schedules (90–600/user/month depending on plan) |
| Agent Builder | Workflow-based Agent Builder (self-hosted only) | Zia AI agents; Cloud edition and regional availability apply |
| Multi-Page Apps | Yes | Yes |
| Embedded Apps | Yes (Enterprise) | Yes (via portals) |
| Mobile Apps | Responsive web apps | Native iOS & Android auto-generated, white-label via MDM |
| Training & Certification | ToolJet Academy: hands-on courses and certifications | Zoho Creator training and developer certifications |
| UI & Components | ||
| Component Count | 78+ built-in components | Limited built-in components (form fields, page elements) |
| Custom Components | Yes, via React components | Widgets via HTML/CSS/JS SDK |
| Application Theming | Workspace-wide theming | App themes and custom widgets |
| White-Labelling | Yes (Team and above) | Custom domains and rebranded mobile apps; edition requirements apply |
| Auto-Generated Forms | Build forms against connected data using components or AI | Yes, form-based app building is core to Creator |
| Data Sources & Integrations | ||
| Total Integrations | 100+ | Zoho and third-party services; available connectors depend on edition |
| Databases | PostgreSQL, MySQL, MongoDB, MSSQL, Snowflake, BigQuery, DynamoDB, Elasticsearch, Redis, MariaDB, CouchDB, Databricks | Relational and NoSQL via connectors (5–30 depending on plan) |
| REST & GraphQL | Yes | REST API, XML-RPC |
| JavaScript Queries | Yes | JavaScript widgets and Node.js cloud functions; plan limits apply |
| Python Queries | Yes | Not supported |
| Connector Limits | Unlimited native data sources; private/custom connectors on Self-hosted only | 5–100+ data sources, 5–20 custom connectors depending on plan |
| ToolJet Database | Built-in no-code database | N/A |
| Compliance | ||
| SOC 2 Type II | Yes | Yes |
| ISO 27001 | Yes | Yes |
| GDPR | Yes | Yes |
| HIPAA | Self-hosted controls support HIPAA requirements; review your configuration and agreements | Review edition, controls and required agreements with Zoho |
| Pricing & Limits | ||
| Free Tier | Yes; 2 builders, self-host available | Limited Free edition; review app and user allowances |
| Per-User Pricing | Per builder only; included end users up to plan caps | Internal-user subscriptions; portal users and Flex plans priced separately |
| Record Limits | Depends on data source and deployment capacity | 25,000–250,000 records/user depending on plan |
| Storage Limits | Customer-managed capacity (self-hosted) | 1–5 GB/user depending on plan |
| API Call Limits | Data-source and service limits apply | 250–1,000 calls/user/day depending on plan |
| Deluge Statement Limits | N/A; no proprietary language limits | Deluge execution limits vary by task and plan |
Comparison reviewed October 4, 2026. Sources: ToolJet plans, ToolJet security, Zoho feature matrix, Zoho Cloud vs On-premise and Zoho Zia BYOK.
2 builders, 50 end users, 10 apps, self-host available
Unlimited apps, up to 100 included end users; workflows on self-hosted only
Unlimited end users, SCIM and dedicated support; air-gapped self-hosting is an add-on
Entry-level app building; confirm app and usage allowances
Broader app and usage allowances; confirm the required capacity
Enterprise SSO and governance; confirm capacity and support terms
10 builders + 500 internal end users: compare the full deployment cost.
| Line Item | Zoho Creator Enterprise | ToolJet Enterprise |
|---|---|---|
| Builders (10) | Internal-user subscriptions; confirm the negotiated rate | Custom Enterprise quote |
| End users (500) | Internal-user subscriptions; external portals have different pricing | Unlimited end users included (Enterprise) |
| Apps | Plan or Flex quote determines the allowance | Unlimited |
| Records | Plan or Flex quote determines the allowance | Data-source and capacity limits apply |
| Storage | Plan or Flex quote determines the allowance | Customer-managed capacity (self-hosted) |
| AI and support | Include model-provider usage and the required support tier | Include the selected AI add-ons and provider usage |
| Annual platform cost | Request a quote for all internal users | Custom Enterprise quote |
ToolJet Pro and Team rates shown above use annual billing. Enterprise procurement requires current quotes; Zoho internal users, external portal users and Flex subscriptions have different pricing. Review Zoho pricing, Zoho support plans and ToolJet pricing.
Deploy on your own infrastructure from day one; Docker, Kubernetes, or any major cloud. Workflows and Agent Builder are self-hosted only. Builder BYOK is available on Enterprise plans for both Cloud and Self-hosted. Private AI gateways and fully air-gapped operation are separate Self-hosted Enterprise add-ons.
Zoho offers commercial On-premise deployment. Its Cloud and On-premise editions have different capabilities, including AI fields, AI tasks, application lifecycle management and some integrations. Validate the exact release and deployment requirements with Zoho before selecting an architecture.
Build with JavaScript and Python, with portable language skills. Audit, fork and self-host the AGPL-3.0 Community Edition. Commercial Enterprise capabilities require the relevant license; app definitions remain ToolJet-specific.
Your Deluge code, automation logic, and data models are tied to Zoho. Plan to rebuild the app logic and interfaces when moving platforms; evaluate data exports and integration reuse separately.
Review AI security and deployment isolation, the ToolJet Trust Center and our AI App Builder before your proof of concept.
Run in your own cloud or data center with full infra control.
Enforce standards, policies, and access boundaries at scale.
Centralized identity with granular permissions and traceability.
Hardened deployments for regulated and security-first teams.
SOC 2 Type II and ISO 27001 certified; supports GDPR compliance.
Discuss your identity provider, approved AI models, deployment topology and support requirements. Start a free evaluation or review an Enterprise architecture with our team.