Everything people ask before they deploy Tenon.
If your question isn't here, ask us, and the answer will probably end up on this page.
About Tenon
What exactly is Tenon?
Tenon is one web app that replaces the usual four: a project tracker (boards, timelines, tickets), a documents tool (a Notion-style editor and an infinite canvas), a team chat (channels, DMs, standups, polls) and an AI assistant that has read all of it. Use it on Tenon Cloud, hosted by us, or host it yourself, including for many departments or clients on one deployment.
Who is Tenon for?
Teams of five to five thousand who are tired of paying for and switching between Jira, Notion, Slack and a separate AI tool. Most start on Tenon Cloud. Organizations that cannot, or would rather not, put their work in someone else's cloud (agencies with client data, regulated industries, public sector, IT teams standardising internal tooling) run the same software self-hosted.
Cloud or self-hosted: which should I choose?
Cloud if you want to be working in two minutes and don't have a rule about where data lives. Self-hosted if you have data-residency or air-gap requirements, or want to host one deployment for several departments or clients. It is the same product and the same database schema, so you can move between them later.
Is Tenon open source?
Tenon is source-available. The self-hosted Community edition is free to run; Tenon Cloud is a hosted service on the same code. See pricing for what the paid plans and editions add.
Why is it called Tenon?
A tenon is the tongue of a mortise-and-tenon joint, the oldest way to make two pieces of wood act as one, without nails or glue. That is what we want work to feel like: projects, docs and conversations that fit together instead of being bolted on. More on the name.
Tenon Cloud
What do I get on the Free plan?
A complete workspace for up to five members: unlimited projects, pages and messages, boards, timeline, hill charts, the editor and canvas, chat with polls and decisions, standups, the Brain assistant (with a provider you connect) and 2 GB of file storage. No credit card, no time limit.
Where is my data stored on Tenon Cloud?
In the region you choose when you create the workspace: EU or US. Database, file storage and backups all stay in that region. Your organization's rows are isolated from every other customer by Row Level Security in Postgres.
Can other Tenon Cloud customers see my data?
No. Tenon Cloud is multi-tenant, and every table has org-scoped Row Level Security policies. The database refuses to return rows that belong to another organization, regardless of what the application asks for. We run the same RLS self-test on Cloud that self-hosters run on their own deployments.
Can I run several organizations on Tenon Cloud?
Each Tenon Cloud account is one organization, one isolated tenant. If you need many isolated organizations (for departments or clients), that is what the self-hosted Enterprise edition is for: one deployment you run, unlimited organizations, no per-tenant fees.
Does AI on Cloud send my data to you?
No. Tenon does not run its own model. You connect the provider you choose (Google Gemini, OpenAI, Azure OpenAI, or an OpenAI-compatible endpoint you host) and prompts go directly from your workspace to that provider under your agreement with them.
Can I move from Cloud to self-hosted later, or the other way?
Yes. Both run the same database schema. Export your organization from Cloud and import it into a self-hosted deployment, or bring a self-hosted organization onto Cloud. Team and Enterprise customers get help with the move.
What is the uptime commitment?
Business plans include a 99.9% monthly uptime SLA with service credits. Free and Team plans run on the same infrastructure without a contractual SLA.
Self-hosting & data
What do I need to self-host Tenon?
Two things: somewhere to serve static files (Nginx, Apache, Caddy, an S3 bucket, any static host) and a Supabase project, either Supabase Cloud in the region you choose, or the open-source Supabase stack running on your own servers via Docker. The install guide walks through both.
Can I host Tenon for my departments or my clients?
Yes. That is what the self-hosted Enterprise edition is for. One deployment holds unlimited organizations, each fully isolated by Row Level Security, each able to connect its own SAML or OIDC identity provider. A superadmin role administers them all. Agencies use it for clients; IT teams use it for departments and subsidiaries.
Does any data leave my infrastructure when self-hosting?
Only what you explicitly configure. Self-hosted Tenon makes no calls home and sends no telemetry to us. The one external call is to the AI provider you select, and if you point it at a self-hosted OpenAI-compatible model, even that stays inside your network.
How does multi-tenancy work?
All organizations share one Postgres database, and every table has Row Level Security policies scoped to the organization. The database itself refuses to return rows that belong to another tenant, regardless of what the application asks for. A superadmin role can see across tenants for administration. There is a built-in RLS self-test you can run after deploying to prove isolation on your instance. Tenon Cloud runs on exactly this architecture.
Can I run it on-premises with no internet?
Yes, with the self-hosted Supabase stack and a local OpenAI-compatible model (or AI disabled). Google sign-in and cloud AI providers obviously require outbound access; email/password auth does not.
How do self-hosted upgrades work?
Deploy the new static bundle, apply the new database migrations, redeploy edge functions. The Enterprise edition includes upgrade support and migration notes for every release.
AI assistant
Which AI models can I use?
Google Gemini via an API key, or any OpenAI-compatible endpoint, which covers OpenAI itself, Azure OpenAI, and self-hosted servers such as Ollama, vLLM or LM Studio. You enter a base URL, a model name and an optional key in Admin Settings. Nothing is hard-coded, on Cloud or self-hosted.
What does the assistant have access to?
Brain reads the projects, tickets and pages the current user is allowed to see. RLS applies to the AI just like it applies to people. It can draft tickets for you to approve; it does not silently change data.
What happens if I don't configure AI?
Everything else works. AI features show a clear "not configured" message instead of a fake result, and cron jobs that depend on AI skip gracefully.
Security & SSO
Do you support SSO?
Yes. Add SAML or OIDC identity providers per workspace from Settings, on the Cloud Business plan or the self-hosted Enterprise edition. A setup drawer gives you the copyable ACS URL, entity ID and redirect values your IdP needs.
Can I see and revoke sessions?
Every user can view their active sessions and revoke any of them. Admins can review per-user activity logs.
Is there an audit trail?
Per-user activity logs and webhook delivery logs are built in. Self-hosters also own the Postgres database and can stream its logs to whatever SIEM they already use.
Do you have a DPA and security documentation?
Yes. Cloud Business and self-hosted Enterprise customers receive a data-processing agreement, a security overview and help with questionnaires. Ask for the pack.
Pricing & editions
Is there a free version?
Two: the Tenon Cloud Free plan (up to 5 members, hosted by us) and the self-hosted Community edition (one organization, up to 10 members, on your infrastructure). Both include projects, pages, chat, standups and the AI assistant. The Free plan is a plan, not a trial.
How is Tenon Cloud billed?
Per active member per month: Team is $10 and Business $18 billed annually ($12 and $22 month-to-month). An active member is someone who signed in during the billing month; deactivated users, public share-link viewers and API keys do not count.
How are the self-hosted editions priced?
Community is free for one organization of up to 10 members. Pro is $6 per member per month (annual) for one organization with unlimited members, insights, API and SSO. Enterprise is priced per deployment, sized by the number of people served, with unlimited organizations. There are no per-tenant fees, so host ten departments or a hundred clients on one licence. Request a quote.
Can I try before buying?
The Cloud Free plan is a permanent free tier, and Team comes with a 14-day trial. For self-hosted, the Community edition is the same code as Pro and Enterprise; a licence key unlocks the additional features without reinstalling.