Tadaweb
Tadaweb is an operating system for publicly available information and open-source intelligence. It combines a managed-attribution browser, guided investigation, persistent monitoring and a no-code query builder in one auditable platform for security and intelligence teams.
What is Tadaweb?
Tadaweb is a platform that its publisher describes as an operating system for PAI and OSINT, that is for publicly available information and open-source intelligence. Rather than a single tool, it bundles four native applications that share the same security controls and can be used one after the other in a single investigation: Browse, a managed-attribution browser that runs on isolated virtual machines and lets analysts move through the clear, deep and dark web while controlling the fingerprint they leave behind; Investigate, which adds pre-built queries across global sources, geographic search, map-based collection and AI transcription, translation and object detection for video; Monitor, which turns those queries into persistent collection plans with alerts and a library of more than two hundred ready-made small-data queries; and Create, a low-code and no-code visual query engine for building bespoke collection, transformation and enrichment workflows that can then be shared across a team.
The method behind the product is what the company calls Small Data: collecting only what is needed and permitted rather than accumulating everything, which the publisher presents as the way to make open-source work repeatable, auditable and fast enough to cut time to insight from days to minutes. Automation is deliberately framed as supporting the analyst rather than replacing them, and the site is explicit that AI is used only where it shortens time to action, with no black box.
Compliance is treated as a product feature rather than a footnote. Every collection workflow is logged, the provenance of data is traceable, queries can be audited visually inside the engine itself, and administrators define their own retention and export criteria, with automatic export and automatic deletion available.
The publisher is Tadaweb S.A., a Luxembourg company registered with the trade register in December 2011 and based in Belval, with further offices in London and Paris. It addresses four sectors: public safety, national security, defence and corporate security. There is no public price list, no free tier and no self-service sign-up: the only published route into the product is a demo request.
What it does
- Browse the clear, deep and dark web from isolated virtual machines with a managed online fingerprint
- Run pre-built open-source intelligence queries and pivot from one lead to the next without leaving the browser
- Set persistent collection plans and alerts to keep watch on people, places and narratives over time
- Build bespoke small-data queries with a visual query engine, with no code to write
- Search by location and switch between conventional search and map-based collection
- Capture evidence with hashes, screen and video capture and a full investigative journey log
- Export findings to internal systems with flexible output formats and full audit trails
When to use Tadaweb / When not to
A quick filter to help you decide if Tadaweb is the right fit.
When to use Tadaweb
- Intelligence and defence analysts who work from publicly available information and need traceable, policy-compliant collection
- Law enforcement and crisis-centre teams monitoring large events, unfolding crises or online radicalisation
- Corporate security teams watching threats to operations, assets, fraud exposure and reputation
- OSINT practitioners who want to turn their own tradecraft into repeatable queries without writing code
- Organisations that must prove where every piece of collected data came from, and keep control of retention and export rules
When not to use Tadaweb
- Individuals and small teams looking for a self-service tool: there is no sign-up, no public price and no free tier
- Buyers who need a published price list before talking to a vendor, since every path leads to a demo request
- Developers looking for a public API or developer documentation, neither of which exists on the site
- Mobile-first users: no iOS or Android application is published
- Anyone expecting a general-purpose generative assistant, as the platform is built for collection and investigation rather than content creation
How to use Tadaweb
A typical end-to-end flow, from setup to results.
- Start from the solution pages, which describe the four applications Browse, Investigate, Monitor and Create
- Read the published use cases, grouped by public safety, national security, defence and corporate security, to find the closest scenario to your own
- Request a demonstration through the Book a Demo form, which is the only published entry point to the product
- Alternatively, go through the Microsoft marketplace route the site supports, which ends on a Tadaweb order confirmation page
- Agree the commercial terms, since the licence is granted through an order form or a statement of work rather than an online subscription
- Review the published legal set before signing: terms of service, end-user licence agreement, privacy policy, product privacy policy and data processing addendum
- Have administrators configure the platform: retention criteria, export rules, automatic deletion and audit logging
- Onboard analysts with the publisher's support, offered on site or remotely
- Begin with the managed-attribution browser and the pre-built query library before building your own queries
- Move your recurring work into Monitor collection plans and share bespoke queries built in Create across the team
Pros & Cons
Pros
- Four complementary applications in one platform, so browsing, investigating, monitoring and query building share the same controls
- Managed attribution and isolated virtual machines protect both the analyst's identity and the organisation's network
- Auditability is built in: provenance of data, visual audit of queries and detailed logs
- Retention and export rules are configured by the customer, not imposed by the vendor
- A data processing addendum is published openly on the site, which is uncommon in this market
- European publisher with EEA hosting by default, a named data protection officer and the Luxembourg CNPD as supervisory authority
- Interface available in five languages and an ecosystem of sixteen named strategic partners
Cons
- No public pricing at all: no pricing page, no amount and no tier anywhere on the site or in its sitemap
- No free trial and no free plan are announced
- No public API and no developer documentation: every API mention in the contracts refers to integrated third-party APIs
- No named security certification is published, only a general claim of holding certifications, with no standard, number or certifying body
- The list of sub-processors is not published and is provided to customers on request only
- The site never states a position on whether customer data is used to train AI models
- No mobile application, and no named customer reference or testimonial anywhere on the site
Pricing & Plans
There is no free plan and no free trial announced, and no price is published. Tadaweb does not operate a pricing page: none exists in the site's sitemap or in its internal route table, and no amount or currency appears anywhere on the site. The product is sold under contract, with the licence granted through an order form or a statement of work and a fair-usage rule capping platform queries or API calls over a given period. The only published route to a quotation is the Book a Demo form, or the sales team by e-mail and telephone. A Microsoft marketplace purchase path also exists, but it carries no published amount either.
Data, GDPR & hosting
A consolidated view of how Tadaweb handles your data.
GDPR overview
Implementation is concrete and documented. Tadaweb S.A. is established in Luxembourg, so no Article 27 representative is required or named. A data protection officer is reachable at dataprotection@tadaweb.com and by post at the Belvaux head office. The privacy policy sets out access, rectification, erasure, withdrawal of consent, portability, objection, restriction and the right to complain, names the Luxembourg CNPD as supervisory authority and links to the EDPB member list. Transfers outside the EEA rely on adequacy decisions, standard contractual clauses or an equivalent mechanism. A Data Processing Addendum is published on the site and incorporated into the agreement, covering breach notification, assistance with impact assessments and a customer audit right. The code of conduct states that personal data is processed only in compliance with the GDPR.
Who owns the data?
The terms keep ownership with the customer. Clause 5.5 of the agreement states that the Client retains its rights to the Client's Content and to the Platform Deliverables, subject to the terms of the third-party APIs where those apply. The published Data Processing Addendum makes the allocation of roles explicit: the Client is the controller and decides the purposes and means of processing, while Tadaweb acts only as a processor and carries out processing on documented instructions given through an order form, a written instruction or the configuration of the platform. Tadaweb further undertakes not to sell, retain, use or disclose personal data for any purpose other than performing the contracted services. For connection and usage data generated by the platform itself, the product privacy policy states that Tadaweb is the controller.
Reuse rights
Customers can reuse what they collect and produce without asking Tadaweb for permission: the agreement leaves the Client's Content and the Platform Deliverables in the Client's hands, and the platform is explicitly designed to push results outwards, with flexible output formats and export to internal systems and data fabrics. Two limits are set by the contract rather than by Tadaweb. First, anything obtained through the integrated third-party APIs remains subject to that provider's own terms, and the Client accepts responsibility for complying with them, including the YouTube terms of service which are named explicitly. Second, a fair-usage rule caps the number of platform queries or API calls over a given period. On Tadaweb's side, the data processing addendum forbids using customer personal data for anything other than delivering the service, and the site never addresses whether customer data feeds AI model training.
Data retention & training
Hosting summary
Hosting depends on the customer. The privacy policy states that, as a general rule, the platform and all data processed for clients located in the United States are hosted and operated in the United States, through Tadaweb and where applicable its third-party service providers, and that otherwise data is stored on servers located in the European Economic Area. The data processing addendum repeats the point for public sector work, stating that all United States public sector data is stored on servers located in the United States, and defines a data transfer as moving personal data outside the EEA at the customer's request when it is stored on EEA servers. Beyond that rule, the exact arrangement is contractual: the policy says data processed on the platform is hosted as indicated in the agreement signed with each customer. Transfers outside the EEA rely on adequacy decisions, standard contractual clauses or an equivalent mechanism. The public website itself is served from a Microsoft-operated address in the Netherlands, which should not be confused with where platform data lives.
Things to keep in mind
Risks and trade-offs to weigh before adopting Tadaweb.
- The domain is second-hand: its earliest web archives from 2001 and 2002 show a parking page and a maintenance notice from a previous owner, so early snapshot dates say nothing about the company
- The site's own structured data claims a 2009 founding date, while the Luxembourg trade register records incorporation on 27 December 2011, a gap of about three years in the flattering direction
- No security certification can be verified: the site claims certifications worldwide without naming a standard, a certificate number or a certifying body
- The list of sub-processors is not published and is only provided to customers on request, so third-party exposure cannot be assessed before signing
- Nothing on the site states whether customer data is used to train AI models, which leaves a material question unanswered for sensitive deployments
- This is a surveillance and collection platform: even with managed attribution and audit trails, the responsibility for lawful and proportionate use sits entirely with the operator, and the vendor makes that explicit
- Governing law changes with the customer's location, from Delaware to France, England and Wales or Luxembourg, which affects remedies and should be checked before contracting
Setup & Integrations
Technical difficulty
There is nothing to install. The platform is reached through a browser and the browsing component runs on isolated virtual machines managed by the publisher, so the technical effort falls on configuration rather than deployment. Administrators set retention criteria, export rules, automatic deletion and logging. The publisher describes the interface as visual, with drag and drop workflows and dashboards that let teams start without writing code, and offers expert support on site or remotely. The real friction is commercial rather than technical: access is granted through an order form or statement of work, so onboarding starts with a procurement cycle, not a sign-up form.
Deployment
Supported languages
Behind Tadaweb
Fundraising
Social
Resources
All the official URLs gathered for verification and reference.
Frequently asked questions
What is Tadaweb?
What does the Small Data approach mean?
Who is the tool aimed at?
How much does Tadaweb cost?
Is there a free trial or a free plan?
Does Tadaweb offer a public API?
Is there a mobile application?
Where is customer data hosted?
Is a data processing agreement available?
Which languages does the interface support?
Should you pick Tadaweb?
Tadaweb is a mature, narrowly targeted product rather than a general-purpose AI tool. The publisher is a Luxembourg company registered at the end of 2011, with around a hundred employees, offices in Belval, London and Paris, and two funding rounds announced in 2023 and 2025. The platform addresses a specific professional problem, running open-source collection at scale without losing control of who is looking, what was collected and where it came from.
Its strongest argument is that compliance and traceability are treated as product features. Managed attribution, isolated virtual machines, hash-based evidence, visual audit of every query and customer-defined retention and export rules are all described as core capabilities rather than options. Publishing a data processing addendum openly reinforces that positioning, and the European establishment, named data protection officer and EEA hosting by default matter to the public-sector buyers the company courts.
The gaps are equally clear and mostly concern what cannot be verified from outside. No price, no tier and no trial are published, so the cost of entry is unknown until a sales conversation happens. No named security certification is available: the site claims certifications without naming a standard, a number or a certifying body. The list of sub-processors is shared only on request, and the position on whether customer data is used to train AI models is never stated. There is also no named customer reference anywhere.
For an intelligence, law-enforcement or corporate security team with a procurement process, Tadaweb is a serious candidate worth a demonstration. For anyone hoping to evaluate it independently, or to try it before speaking to a salesperson, the published material will not be enough.
- Choosing a selection results in a full page refresh.
- Opens in a new window.