Isolated by the database
Every table carries org-scoped Row Level Security policies. Your workspace cannot see another customer's data, and no application bug can change that.
Tenon Cloud · Hosted by us
The whole workspace, without the servers.
Sign up, name your workspace, invite the team. Projects, docs, chat and the Brain assistant are ready before the kettle boils. We run the infrastructure, backups and upgrades; your workspace stays isolated from every other customer by the database itself.
Free for up to 5 members
No credit card
EU or US data region
Two minutes, honestly
From sign-up to a working team.
Create your workspace
Sign up with email or Google. Name your organization and pick a data region. That's the whole setup.
Invite people
Send invitations by email. Everyone lands in the same workspace with an onboarding tour that explains the four pieces.
Bring your work in
Import Word and PDF documents as pages, create your first project, and optionally connect an AI provider so Brain can start reading.
What "hosted" means here
We run it. You still own the shape of it.
Tenon Cloud is the same software self-hosters deploy, running on our multi-tenant infrastructure. Your organization is one tenant: its rows are yours, protected by Row Level Security, in the region you chose.
Data region choice
Pick EU or US when you create the workspace. Your database, files and backups stay in that region.
Your AI provider, still
Even on Cloud, the AI model is your choice. Connect Gemini, OpenAI, Azure, or an OpenAI-compatible endpoint you host, from Admin Settings.
Backups and upgrades, done
Daily backups with point-in-time recovery. New releases roll out to Cloud first, with no action from you.
SSO, sessions, audit
SAML and OIDC single sign-on, session revocation and activity logs on the Business plan.
Leave whenever you like
Export your organization's data, or move it to a self-hosted deployment. It's the same schema, with no translation layer.
Business plan
Identity, audit and an SLA, for when IT gets involved.
Your organization on Tenon Cloud is one isolated tenant. The Business plan adds what a security review asks for: single sign-on with the identity provider you already run, visibility into sessions and activity, a data region commitment, and a contractual uptime guarantee.
- SAML & OIDC single sign-onOkta, Microsoft Entra, Google Workspace, Keycloak and any standards-compliant IdP. Enforce it so password login is off.
- Sessions and activity logsEvery member can see and revoke their sessions; admins review per-user activity.
- Region, SLA, DPAEU or US data residency in writing, 99.9% uptime with service credits, and a signed data-processing agreement.
| Setting | Status |
|---|---|
| Single sign-on | SAML · Okta · enforced |
| Data region | EU (Frankfurt) |
| Active sessions | 142 · 3 revoked this week |
| Activity log retention | 365 days |
| Uptime (30 days) | 99.98% |
One organization. One tenant. Your identity provider.
Cloud or self-hosted?
Same product. Two ways to run it.
Most teams should start on Cloud: one organization, hosted by us. Some need, or simply want, to run Tenon on their own infrastructure, and self-hosting is also the only way to run one deployment for many departments or clients. Both are first-class.
| Tenon Cloud | Self-hosted | |
|---|---|---|
| Setup time | 2 minutes | 1 hour to half a day |
| Who runs backups & upgrades | We do | You do (Enterprise includes support) |
| Where data lives | Our infrastructure, EU or US region | Your servers or your cloud account, any region |
| Tenant isolation | Row Level Security per organization | Row Level Security per organization |
| Organizations | One per customer account | Enterprise: unlimited organizations per deployment (departments, clients) |
| AI provider | Gemini, OpenAI, Azure, or your own endpoint | Same, plus fully air-gapped local models |
| SSO (SAML / OIDC) | Business plan | Pro and Enterprise editions |
| Pricing | Free · $10 · $18 per member/month | Free Community · Pro $6/member · Enterprise per deployment |
| Best for | Most teams, startups, fast-moving companies | Regulated industries, agencies hosting clients, IT platform teams |
Questions
Tenon Cloud FAQ.
What do I get on the Free plan?
A complete workspace for up to five members: unlimited projects, pages and messages, boards, timeline, hill charts, the editor and canvas, chat with polls and decisions, standups, the Brain assistant (with a provider you connect) and 2 GB of file storage. No credit card, no time limit.
Where is my data stored on Tenon Cloud?
In the region you choose when you create the workspace: EU or US. Database, file storage and backups all stay in that region. Your organization's rows are isolated from every other customer by Row Level Security in Postgres.
Can other Tenon Cloud customers see my data?
No. Tenon Cloud is multi-tenant, and every table has org-scoped Row Level Security policies. The database refuses to return rows that belong to another organization, regardless of what the application asks for. We run the same RLS self-test on Cloud that self-hosters run on their own deployments.
Can I run several organizations on Tenon Cloud?
Each Tenon Cloud account is one organization, one isolated tenant. If you need many isolated organizations (for departments or clients), that is what the self-hosted Enterprise edition is for: one deployment you run, unlimited organizations, no per-tenant fees.
Does AI on Cloud send my data to you?
No. Tenon does not run its own model. You connect the provider you choose (Google Gemini, OpenAI, Azure OpenAI, or an OpenAI-compatible endpoint you host) and prompts go directly from your workspace to that provider under your agreement with them.
Can I move from Cloud to self-hosted later, or the other way?
Yes. Both run the same database schema. Export your organization from Cloud and import it into a self-hosted deployment, or bring a self-hosted organization onto Cloud. Team and Enterprise customers get help with the move.
What is the uptime commitment?
Business plans include a 99.9% monthly uptime SLA with service credits. Free and Team plans run on the same infrastructure without a contractual SLA.
Start on Cloud today.
Free for up to five members, no credit card. Upgrade when you need insights, integrations or SSO, or move to self-hosted later. Same schema, same product.