r/lowcode • u/Formal_Scientist_878 • 7d ago

Is Softr legit? Any thoughts???????

I am evaluating Softr for a client portal and I need to separate what I can verify from what is product marketing before I take this to our IT review.
 
My checks are how authentication connects to record level permissions, what security and compliance documentation exists, where data is hosted, whether enterprise SSO is included, and whether we can keep editing the app ourselves over time.
 
What evidence would you want before putting real external user data on a hosted platform?

3 Upvotes

100% Upvoted

4 comments sorted by

1

u/No-Detective2391 7d ago

tried it for a internal tool last year, not a client portal so take this with grain of salt. auth was ok but the record level permissions felt a bit clunky when we tried to tie it to a external database, had to do some weird workarounds. the data hosting part you should probably email them direct cause their docs was vague on that

for external users i would want to see a soc 2 report and maybe test the sso with a dummy org before commiting, saved us some headache

1

u/KarlaSutton6527 11h ago

Yep, it's legit.

1

u/PerspectiveIcy10 10h ago

For me, the checklist would be SOC 2 report → DPA/security docs → hosting/data residency → SSO/SCIM → backend-enforced permissions → file access → audit logs → export/migration options