Security and data sovereignty
Grist is fully self-hostable, meaning you can deploy it on-premise to meet specific security and regulatory requirements. Grist data is always portable, with no lock-in mechanisms.
Grist combines on-premise flexibility with industry-leading collaboration tools. Trust your infrastructure and your data – no more, no less.
Open-source core with full source availability
Granular role-based access rules
Government-audited and auditable
Powerful sandboxed Python formulas
Robust SSO options (OIDC, SAML, and more)
Advanced admin controls for workspace management
How does Grist handle my data?

Grist is built for sensitive data. Your data is deployable on-premise while remaining collaborative. Your data is portable but follows strict role-bases access rules when exporting to lower exfiltration risk.
This technical architecture flows directly from our long-standing software principles.
Why do organizations with strict data security requirements choose Grist?
Grist is 100% self-hostable for on-premises deployment, or available with managed hosting around the world.
Grist presents a lowered risk profile thanks to comprehensive and highly-customizable role-based access rules, letting you limit access and exporting down to the row. You can also test these roles interactively to make sure access is properly limited.
Grist is built around fully portable data with no lock-in mechanisms. A Grist file is an SQLite database, and always able to be exported elsewhere – subject to access rules, of course.
How can Grist be deployed?
Secure SaaS
Hosted on getgrist.com and ready to go. The easiest way to start using Grist or to test out features before deploying on-premise.
Managed server
Grist Labs deploys and manages Grist on a dedicated server in a region of your choice. Gives you the customization of self-hosting, but leaves the devops and maintenance to us.
Self-hosted
Serve containerized via Docker or compile directly from source. Configure everything to fit your requirements: SSO, storage, sandboxing, snapshots, styling, and much more.
Why should my organization self-host Grist?
You don’t have to self-host Grist, but here are some common benefits we see in larger deployments:
Address governance, compliance or data residency requirements.
Integrate into your organization’s SSO.
Run with extra CPU and memory for more power.
Create advanced customizations and integrations.
Grist for Enterprise
All Grist features
Priority support
Security alerts
Frequently asked questions
Yes. Grist being fully self-hostable means you can deploy it on servers you own and administer. Grist Labs can also deploy and manage a Grist server for you in the region of your choice.
Learn more about self-hosting Grist in our Help Center, and visit grist-core repo on GitHub to view the source.
Grist supports a variety of authentication options for self-hosters, including OIDC, SAML and forwarded headers. If you don’t have a system already in place, we also provide an authentication method that lets users sign in via getgrist.com, built on the industry-standard OAuth 2.0 and OpenID Connect (OIDC) protocols. Learn more about self-hosted authentication in our Help Center.
Self-hosted Grist also supports the System for Cross-domain Identity Management (SCIM) for managing large organizations with dynamic user bases. Learn more.
Grist data is always portable and exportable, subject to access rules that you define. You can export tables as CSV, TSV and XLSX files, as well an entire Grist documents with or without change history.
Grist documents can be downloaded in their entirety as an SQLite database file with a .grist extension. The downloaded file will contain all your tabular data, any attached files within those tables, metadata about your tables, pages, and widgets, and a history of recent modifications of the document.
The French government deploys Grist as part of its digital suite for thousands of public sector workers.
Grist is a general tool and is used in many different capacities. Aside from the French public service, some of the largest Grist deployments are in manufacturing (Maddox), aerospace (NP Aerospace) and utilities (AEP). All of these industries have strict security needs, including on-premises hosting as an absolute requirement.
Take control of your data
Unlock your data’s true potential with the better spreadsheet



