What we access — and what we don't.
Everything you'd ask us in a vendor security review, answered plainly. If something isn't available today, it's listed here.
What we read
Metadata only, with read-only access: table and column names, descriptions, grants, and masking policy names. Never the rows in your tables.
Credentials
Kept in environment variables or a secrets manager — never stored in our database and never written to logs.
Changes to Snowflake
None. We don't change grants, masking policies or anything else. Fixes are made by your team.
How setup works
Agreed with you at onboarding, including where it runs.
Sign-in
Email and password, with optional single sign-on through one OIDC provider.
Inside the app
Five roles. Changes are denied unless a person's role and business domain allow them.
What's recorded
Owner decisions and risk updates, with who, when and why. Not every edit is recorded yet.
Freshness
Refreshed every time you sync. We don't claim real-time.
What we don't offer yet
Listed so you don't have to ask.
Questions for your security review?
Send them over — we answer in writing.