| Security & Access Control |
| SSO (SAML/OIDC) | Yes; from Team plan | Yes; SAML 2.0 |
| RBAC | Built-in + custom roles | Yes, granular permissions |
| SCIM 2.0 Provisioning | Yes (Enterprise) | Not documented |
| LDAP / Active Directory | Yes | Via Zoho Directory |
| Audit Logs | Yes (Team and Enterprise) | Record history, print and export audit trails; review retention and scope |
| Secrets Management | AWS Secret Manager, Azure Key Vault, GCP Secret Manager, HashiCorp Vault | Review edition-specific capabilities |
| AES-256-GCM Encryption | Yes | Encrypted at rest and in transit |
| MFA | Via IdP policies | Yes; TOTP |
| Directory Group Sync | Enterprise group sync, automatic assignment and SCIM | Roles and directory controls; validate provisioning requirements |
| Fine-Grained Access | Enterprise controls for pages, components, queries and rows | Permission sets and role hierarchies; validate data and action scope |
| Deployment Isolation | Multiple deployments on Self-hosted Enterprise; separate secrets and data sources per instance | Cloud developer environments; On-premise lifecycle capabilities differ |
| Dedicated Support | Enterprise dedicated support manager; agree escalation and rollout needs | Separate Enterprise support tier with a technical account manager |
| AI Capabilities |
| AI App Generation | Generate and refine multi-page apps with AI | CoCreator and Zia-assisted app development |
| Model Provider Choice | Choose supported providers and compatible models for your AI setup | Zia supports Zoho, OpenAI, Google and Anthropic; regional restrictions apply |
| Builder BYOK | Enterprise (Cloud or Self-hosted) | Zia BYOK on paid Creator 6 plans; provider charges apply |
| Customer-Hosted AI | Customer-hosted gateway is a Self-hosted Enterprise add-on; validate supported model endpoints | On-premise AI fields and AI tasks differ from Cloud; confirm the required AI configuration |
| AI Data Boundary | External BYOK providers still receive requests; internal inference needs a supported local endpoint | Review the selected provider, region and data flow for each Zia feature |
| AI Inside Applications | Connect AI provider APIs; use self-hosted workflows for orchestration | AI fields, custom AI models and Zia agents; deployment restrictions apply |
| Coding-Agent Workflow | ToolJet MCP connects compatible coding agents to app building | Evaluate agent tooling and permissions for the chosen Creator edition |
| AI Costs | Managed AI credits or your provider's billing, depending on setup | Provider billing and feature limits depend on the Zia configuration |
| Deployment Options |
| Cloud (Managed SaaS) | Yes | Yes |
| Docker / Docker Compose | Yes | Confirm support for the commercial On-premise edition |
| Kubernetes | Yes | Confirm support for the commercial On-premise edition |
| AWS / Azure / GCP | Yes; EC2, ECS, EKS, AKS, ACI, Cloud Run, GKE | Zoho Cloud or commercial On-premise; validate the target infrastructure |
| Helm Charts | Yes | Confirm support for the commercial On-premise edition |
| Air-Gapped | Fully offline with the Self-hosted Enterprise add-on | Confirm support for the commercial On-premise edition |
| On-Premise | Yes; Community Edition and commercial self-hosted plans | Commercial On-premise; AI fields, AI tasks and some integrations differ from Cloud |
| Self-Host on Free Plan | Yes | Commercial On-premise pricing requires a quote |
| Developer Experience |
| Primary Language | JavaScript and Python; industry-standard, portable skills | Deluge for business logic; platform-specific app definitions |
| Custom Code | JavaScript queries and event handlers; Python queries for custom logic | Deluge scripts, Java/Node.js cloud functions and widgets |
| Custom Components | Yes, via React components | Widgets via HTML/CSS/JS SDK |
| Git Sync | Git-based app promotion (Team and above) | Cloud developer environments; assess Git-based promotion requirements |
| Multi-Environment | Self-hosted Team and above; Cloud Enterprise | Dev / Stage / Production |
| API Generation | Query connected APIs and databases; ToolJet APIs for platform operations | Auto-generated REST and XML-RPC APIs per app |
| Plugin SDK | Custom React components; ToolJet CLI for custom data sources on Self-hosted | Widgets and custom connectors; different extension model |
| OpenTelemetry | Self-hosted observability integrations; configure your monitoring stack | Review edition-specific capabilities |
| Vendor Lock-in | Open-source platform; JavaScript/Python skills transfer, app definitions remain ToolJet-specific | Deluge logic and blueprints need rewriting to move platforms |
| Core Platform |
| Visual App Builder | Drag-and-drop with 78+ components | Drag-and-drop form and page builder |
| Built-in Database | ToolJet Database (PostgreSQL-backed, no-code UI) | Built-in relational database with form-based data entry |
| Workflow Automation | Visual JS/Python workflows (self-hosted only) | Blueprints (visual), Deluge scripts, Flows |
| Scheduled Jobs | Via workflow scheduler (self-hosted only) | Custom schedules (90–600/user/month depending on plan) |
| Agent Builder | Workflow-based Agent Builder (self-hosted only) | Zia AI agents; Cloud edition and regional availability apply |
| Multi-Page Apps | Yes | Yes |
| Embedded Apps | Yes (Enterprise) | Yes (via portals) |
| Mobile Apps | Responsive web apps | Native iOS & Android auto-generated, white-label via MDM |
| Training & Certification | ToolJet Academy: hands-on courses and certifications | Zoho Creator training and developer certifications |
| UI & Components |
| Component Count | 78+ built-in components | Limited built-in components (form fields, page elements) |
| Custom Components | Yes, via React components | Widgets via HTML/CSS/JS SDK |
| Application Theming | Workspace-wide theming | App themes and custom widgets |
| White-Labelling | Yes (Team and above) | Custom domains and rebranded mobile apps; edition requirements apply |
| Auto-Generated Forms | Build forms against connected data using components or AI | Yes, form-based app building is core to Creator |
| Data Sources & Integrations |
| Total Integrations | 100+ | Zoho and third-party services; available connectors depend on edition |
| Databases | PostgreSQL, MySQL, MongoDB, MSSQL, Snowflake, BigQuery, DynamoDB, Elasticsearch, Redis, MariaDB, CouchDB, Databricks | Relational and NoSQL via connectors (5–30 depending on plan) |
| REST & GraphQL | Yes | REST API, XML-RPC |
| JavaScript Queries | Yes | JavaScript widgets and Node.js cloud functions; plan limits apply |
| Python Queries | Yes | Not supported |
| Connector Limits | Unlimited native data sources; private/custom connectors on Self-hosted only | 5–100+ data sources, 5–20 custom connectors depending on plan |
| ToolJet Database | Built-in no-code database | N/A |
| Compliance |
| SOC 2 Type II | Yes | Yes |
| ISO 27001 | Yes | Yes |
| GDPR | Yes | Yes |
| HIPAA | Self-hosted controls support HIPAA requirements; review your configuration and agreements | Review edition, controls and required agreements with Zoho |
| Pricing & Limits |
| Free Tier | Yes; 2 builders, self-host available | Limited Free edition; review app and user allowances |
| Per-User Pricing | Per builder only; included end users up to plan caps | Internal-user subscriptions; portal users and Flex plans priced separately |
| Record Limits | Depends on data source and deployment capacity | 25,000–250,000 records/user depending on plan |
| Storage Limits | Customer-managed capacity (self-hosted) | 1–5 GB/user depending on plan |
| API Call Limits | Data-source and service limits apply | 250–1,000 calls/user/day depending on plan |
| Deluge Statement Limits | N/A; no proprietary language limits | Deluge execution limits vary by task and plan |