Security

Learn about Teable’s security architecture, data protection, and compliance measures

Encryption

AES-256 & TLS

ISO 27001 · SOC 2 · GDPR

Coming soon

AWS Hosted

US-West Oregon

SSO Ready

OIDC Protocol

Teable is committed to maintaining the security and privacy of your data. Our security practices are designed to protect your information while giving you full control over your workspace.

Data Encryption

Encryption in Transit

All data transmitted between your browser and Teable servers is protected using 256-bit SSL/TLS encryption. We enforce HTTPS for all connections with automatic HTTP to HTTPS redirection.

Encryption at Rest

Teable Cloud

All data stored in our databases is encrypted using AES-256 encryption through AWS infrastructure. This includes:

• Database storage (PostgreSQL on AWS RDS)
• File attachments
• Backups

Self-Hosted

You have full control over your encryption configuration based on your infrastructure requirements. We recommend:

• Enabling database-level encryption
• Using encrypted storage volumes
• Implementing backup encryption

Infrastructure Security

Teable Cloud is hosted on Amazon Web Services (AWS) in the US-West (Oregon) region, leveraging AWS’s enterprise-grade security infrastructure.

Security Headers

Implementation of Helmet and Content Security Policy (CSP) to prevent common web vulnerabilities like XSS and clickjacking.

Bot Protection

Cloudflare Turnstile integration to prevent automated attacks and spam registrations.

Rate Limiting

Protection against brute-force attacks on login attempts with account lockout, and rate limiting on email verification and password reset operations.

Password Security

All passwords are hashed using bcrypt algorithm with unique salts, making them resistant to rainbow table attacks.

Access Controls

Role-Based Permissions

Teable provides granular role-based access control with five permission levels:

Role	Capabilities
Owner	Full control over the workspace, including billing and deletion
Creator	Can create tables, views, and manage workspace structure
Editor	Can edit records and field values
Commenter	Can view content and add comments
Viewer	Read-only access to content

Authority Matrix

Authority Matrix allows fine-grained permission control at the field, record, and view level, enabling you to precisely define what each user or role can see and modify.

This feature is particularly useful for:

• Restricting sensitive fields (e.g., salary, personal information)
• Limiting record access based on ownership or department
• Creating custom views with different permission sets

Share Link Protection

Protect your shared views, projects, or artifacts with a password. When enabled, recipients must enter the correct password before accessing the shared content.

When you turn on password protection, Teable generates a random password that takes effect immediately. Click Copy link and password next to the password to copy the link and password together as one line of text, ready to send to visitors. To change it, click the edit button and enter a new password, or click Generate random password for a new one.

The password is shown in plain text only in the share panel right after it is set. When you reopen the share settings, it is hidden; to copy it again, set a new password.

Account and Sign-in

Devices

Open your avatar at the bottom left → Settings → Devices to see which devices your account is signed in on, along with the Login history for the last 30 days. Each device shows the browser or mobile app, operating system, sign-in method, IP address, and last active time.

If you see a device you don’t recognize, click Sign out on that device, then change your password. Click Sign out all other devices to sign out every device except the current one. Signed-out devices must sign in again to continue.

Failed Sign-in Lockout

After 5 incorrect password attempts in a row for the same email, the account is locked for 15 minutes. Further incorrect attempts during that time are rejected.

Data Management

Record History

Track all changes made to your records with a comprehensive revision history:

• See who made changes and when
• View previous values before modifications
• Understand the complete lifecycle of your data

Trash & Recovery

Deleted items are moved to trash and can be recovered within the retention period, providing protection against accidental data loss.

Data Backup & Export

Teable provides multiple options for backing up your data:

Method	Description	Use Case
Project Export	Download entire Project as .tea file (structure, data, automations)	Full backup, migration
Project Duplicate	Create a copy of Project within Teable	Quick snapshot
CSV Export	Export individual table data	Data portability
API Export	Programmatically export records via REST API	Automated backups

You can manually back up your projects by exporting the entire Project as a .tea file, exporting individual tables as CSV files, or retrieving your data via the Teable API.

Single Sign-On (SSO)

Teable supports enterprise SSO through the OIDC (OpenID Connect) protocol, compatible with major identity providers:

Azure Entra ID

Okta

Google Workspace

Auth0

OneLogin

Authentik

Compliance

Teable Cloud is working toward ISO 27001, SOC 2 Type II, and GDPR compliance. Our security controls will be independently audited as part of this work.

ISO 27001

Coming soon

SOC 2 Type II

Coming soon

GDPR

Coming soon

Read the announcement in our community for details, and follow our progress on the Trust Center.

Self-Hosted Deployment

For organizations with strict security or compliance requirements, Teable offers self-hosted deployment options:

1. Data Residency

   Keep all data within your own infrastructure and geographic boundaries

2. Network Control

   Deploy within your VPC with custom firewall rules and network policies

3. Custom Security

   Integrate with your existing security stack, SIEM, and monitoring tools

4. Backup Control

   Implement your own backup and disaster recovery procedures

Security Best Practices

We recommend the following practices to maximize your workspace security:

Use strong, unique passwords

Create passwords with a mix of uppercase, lowercase, numbers, and symbols. Consider using a password manager.

Enable SSO when available

Single Sign-On provides centralized authentication management and additional security controls.

Review collaborator permissions regularly

Audit your workspace members and their permission levels periodically to ensure least-privilege access.

Use password-protected share links

When sharing views externally, always enable password protection for sensitive data.

Contact

For security-related inquiries or to report a vulnerability, please contact us at [e-mail]