All Features

Security your IT team will actually approve

Every tool on WorkApps is private by default, encrypted in transit and at rest, and accessible only to authenticated team members.

Private by default

WorkApps was built for internal tools — not public websites. There's no "make public" button, no marketplace listing, no way for an outsider to stumble onto your team's tools.

Every tool requires authentication to access. Your team signs in with their credentials. Everyone else sees nothing.

Security on every plan

You shouldn't have to pay extra for the basics. These protections are included on every WorkApps plan, including Starter.

Authenticated access

All plans

Every published tool is private by default. Only authenticated team members can access your tools — no public links, no accidental exposure.

No public marketplace

All plans

Your tools are never listed in a public directory. WorkApps is not a marketplace — it's a private publishing platform for your team.

Data encrypted in transit and at rest

All plans

Industry-standard TLS encryption for data in transit and AES-256 encryption at rest. Your tools and their data are protected at every layer.

Globally distributed infrastructure

All plans

Tools are served from edge locations closest to your team. Fast load times, high availability, no single point of failure.

Enterprise-grade controls

For organizations that need SSO, audit trails, and compliance controls that satisfy security reviews.

SSO / SAML

Enterprise

Teams log in with existing corporate credentials via Microsoft Entra ID or SAML. No separate passwords, no onboarding friction.

Group-based access control

Enterprise

Manage permissions at org scale with groups. Restrict guest domains or disable guest access entirely — the lever that gets IT to say yes.

Audit logs & publish governance

Enterprise

Audit logging for app publishing, access changes, and member management. Optional org-wide publish approval and audit export.

Custom hostname

Enterprise

Tools live at your org's own domain instead of {slug}.workapps.tech. Builds internal credibility and makes the tool feel native.

Organization-wide scale

Enterprise

Core is designed for ~2,500 MAU per app. Enterprise removes that ceiling so a tool built for one team can safely roll out company-wide.

Compliance & infrastructure

The controls your security team will ask about.

Hosted on SOC 2 Type II certified infrastructure
Hosted on ISO 27001 certified infrastructure
TLS 1.3 for all connections
AES-256 encryption at rest
Data deletion within 30 days of request
No third-party data sharing

Your data. Your control.

Delete any tool at any time. Delete your entire account and all associated data. Deletion is permanent and completed within 30 days.

Read our privacy policy →

Need enterprise security?

Talk to our team about SSO, audit logs, and custom compliance requirements.