Good morning all, I’m relatively new to Adalo (just coming to the end of my first month) and am, so far, really impressed both with the platform and the support I’ve been getting from the team. I can see a bright and exciting future for this project. I have been a “Bubble”-er for 2-3 years now, and the speed of development which Adalo offers far outstrips that of Bubble, albeit, Bubble’s API connector is a bit more advanced (allowing for much greater scope with apps built there). The ability to deploy to the App Store in one click for iOS is incredible (and works!). I am a big fan already. While I’m sure it’s irritating, Bubble are a little further ahead in their journey, so I make a few comparisons here. In particular, they recognise that people are investing a lot of time learning their platform and building the future of apps and services using their product. Some of those require investment from third parties. As part of their commitment to the community, they published their ‘guide to Bubble for investors’. There have also been a number of forum posts to help get some background (the sort of background useful for pitch decks, discussions and website FAQ’s) which I have assimilated below. It would be great to get the Adalo team’s take on these topics and I’m sure the community will find them helpful: Guarantee “While we plan on being around for a long time, we’ve committed publicly to release our code in open source with migration instructions if we ever were to shut down shop and cease offering our service.” - Has Adalo made any such guarantee? GDPR Have you committed to the EU-US Privacy Shield Framework? If not, is it possible to locate Adalo apps on EU servers? Have you got Data Processing Agreements (DPA’s) with your own sub-suppliers? Will you be offering a DPA to Adalo clients - Bubble have included theirs in their terms of service? Breach notification - in the EU, we have a duty to disclose breaches of clients’ data within ‘a timely manner’ (the thinking seems to be ~72 hours as a max) - will you undertake to notify us within 24-48h of any such breach so that we can do so? Have you/can you release the full list of data sub-processors (see Bubble) Security & Encryption How would you describe the ‘plus points’ of the current security and encryption regime at Adalo? Have you got roadmapped improvements planned? Are you planning to offer 2FA at all? Same question for Face ID for the iOS apps?

Would love an update on this. I can only speak for my small company, but if Adalo gets HIPAA compliance I will be the first to throw all my money at them. As a mobile engineer, most “plug and play” app tools allow you to do very basic database features, most of them link to a Google firebase DB environment. For companies who’s business is the mobile app itself, their top concern is security compliance. Regardless of how great a mobile building tool may be, without the security it’s a hard pass. Until then, I’ll stick to coding my apps from scratch.

If you are offering EU servers, maybe also have the option of Asia/Australian server. My current app with Bubble runs on an AWS Sydney server (obviously I pay for the dedicated AWS instance) and the Bubble team manage it and their platform (which I pay for) The main reason I am looking at Adalo is your native app capability, as this is truly amazing, but being able to run an app with good resources, without resources being drained by either my many users or “noisy” neighbours would be amazing.

Hi @jeremy, have you got any feedback regarding all items ongoing for GDPR and security? In Europe, we won’t be able to go live without a minimum set of GDPR requirements (the most complex could wait a bit I think). Many thanks, I’m currently working on my whole setup for the incoming launch of my business, based on adalo as the backend and partly front-end.

True, no European Market apps without clear GDPR requirement fullfiled here…where are collections stored in Adalo, AWS or some Homebased Adalo servers ?

Just added another thread: [image] REST API security - Airtable and Custom Actions Get Help Adding a new aspect to the Security, Privacy, and GDPR discussions: See also: Security, Encryption, Sustainability & GDPR Possible API Key havoc? I just read the following in the Appgyver documentation: [image] In the context of Airtable integration and custom actions we are using our API keys in the configuration. @Ben @jeremy I am now wondering, if we have the same risk as described above or is there some middleware/proxy mechanism in place that the API Keys are only stored in a secured…

Hi there, can we get any update on that please?

Please refer to this request and add your upvote to it in order to be informed when there has been progress made on this. GDPR Specific Actions | Voters | Adalo We are doing our best to put in place the systems needed for these processes and compliance but they take time. We hope you understand and bear with us.

Can we use AWS as backend for Adalo app (frontend)? Seems it would help solve a number of issues, is it in works?

Hey! One quick question : is there any action planned to work on SCC at Adalo? That would / will allow to bypass the Privacy Shield issue, and let European makers (and any maker with European users) build compliant apps… Many thanks!

Security, Encryption, Sustainability & GDPR

Get Help

110p July 29, 2020, 5:05pm 11

Do you have an update? Here or there Taking the Brakes Off - #19 by 110p

Topic		Replies	Views
Taking the Brakes Off Get Help	19	4890	July 29, 2020
Adalo APP - Responsibility of whom? Get Help	19	6210	April 15, 2021
HIPAA Compliant Get Help	22	2634	February 3, 2022
Deploy app with end user in Europe - GDPR / EU-US Privacy shield Get Help	5	993	November 4, 2020
Adalo 3.0 - big steps forward for Adalo! Info & Announcements	86	4605	February 12, 2025

Security, Encryption, Sustainability & GDPR

Related topics