TL;DR
The Base44 Compliance API connects your Enterprise workspace to the security platform you already use. See every app, AI agent, integration, member and role in your workspace, next to the rest of your SaaS. It's live with Orca Security (our design partner), Token Security and Noma Security. Upwind, Pluto and Zenity are coming soon.
Every week, someone at your company builds something new on Base44: an onboarding portal for HR, a pipeline dashboard for Sales, a help desk for Support.
That speed is the point. Teams turn ideas into working apps without waiting on engineering. Each new app can also hold company data, connect to other tools and bring in new people, and your security team needs to see all of it.
The Base44 Compliance API is live. Manage Base44's security posture from the platform your team already uses for the rest of your SaaS. Your teams keep building, and your security team keeps control.
Why connect your security platform
- See everything your teams build: a current list of every app, AI agent and integration in your workspace
- Catch risky setups early: public apps, integrations someone connected on their own and open findings from Base44's security scans
- Know where data goes: every connected service, and who owns each app and integration
- Include Base44 in access reviews: workspace members and their roles, next to your other SaaS
- Records on demand: pull audit-ready evidence of your Base44 setup from your security platform when you need it
- No new console: Base44 shows up where your security team already works
Designed with Orca Security
Orca Security, our design partner, helped shape the Compliance API from the start. Orca extends its unified platform to Base44, giving security teams visibility into workspace configuration across apps, data, identities and keys. Enterprise admins get one place to govern who can open an app, who can read its data and which services its AI agents can talk to.
From our design partner
Every company now has employees building software outside engineering. Base44's Compliance API gives security teams a way to govern that work instead of trying to block it. We built our connector so Base44 customers can bring those apps into the same unified platform as the rest of their cloud and AI security.
Gil Geron
CEO of Orca Security
Orca customers can get started with Orca's setup guide.
Bring your own security vendor
Orca Security, Token Security and Noma Security are live. Upwind, Pluto and Zenity are coming soon, with more on the way.
Using another security platform? Request it on the Compliance API page. Our team uses those requests to decide which vendors to bring on next.
What your security platform sees
Once connected, your security platform can see:
- Workspace settings and security configuration
- Every app, its owner and its members
- Data table structure and access settings (not the records)
- Custom domains, backend functions and AI agents
- Connected services and their owners (app, workspace or member)
- Secrets and API keys (not their values)
- Workspace members and their roles
- Results of Base44's security scans on your apps
It sees how your workspace is set up, not what's in your apps. Every request is read-only, so connecting a vendor doesn't change your workspace. App data and secret values stay private. Your workspace admin decides what each vendor can see through the key's permissions.
Get started in two steps
- A workspace admin creates a Compliance API key in Workspace settings › Secrets › Workspace API Keys and chooses what it can see.
- Add the key to your security platform. Edit, disable or delete the key at any time.
The Compliance API is included with Enterprise at no extra cost. Your security vendor bills separately for its own product.
Enterprise admins
Set up the Compliance API for your workspace
For security vendors
Give your customers a view of every app and AI agent their teams build on Base44, with access they control. Approved partners are listed on the Compliance API page and get full API docs, a test environment and direct help from our team.