Security

Security and data access

Unveilix answers questions on your databases without moving your data out of them. Here is exactly how access works.

Security controls

  • Read-only by design

    Unveilix reads from your databases and never writes to them. Generated SQL is checked to be a read-only query before it runs.

  • Your data stays put

    Queries run against your databases in place. Tables are not copied into a separate warehouse before you can ask a question.

  • No inbound firewall ports

    For databases inside your network, a lightweight secure client connects outbound to Unveilix over an encrypted tunnel, so nothing in your network has to accept inbound connections.

  • Credentials in a secrets vault

    Database credentials are held in a dedicated secrets vault, not in application configuration.

  • Roles and per-source access

    Workspace roles and per-source permissions decide who can query which database.

  • Audit log

    Questions and data access are recorded in an audit log, so you can see who asked what and which data was read.

Unveilix can

  • Read the tables and schemas you allow
  • Run SELECT queries it has checked first
  • Record every question in an audit log

Unveilix can't

  • Write, update or delete your data
  • Open inbound ports into your network
  • Query sources a member hasn't been granted

Running a security review? See how the layers fit together or ask the team.

Security questions

Short answers to what teams ask most.

Something else? Talk to the team

  • No. Unveilix only reads. Every generated query is checked to be read-only before it runs, and connections are set up for read access.

  • No. For databases inside your network, a secure client runs on your side and connects outbound to Unveilix over an encrypted tunnel. No inbound ports need to be opened.

  • Your source tables stay in your databases and are not copied into a warehouse. Unveilix keeps your conversation history, including the results shown with each answer, so threads and dashboards can be reopened.

  • Workspace roles and per-source permissions control which members can query which databases, and an audit log records questions and data access.

Ask your own data a question today

Connect a database in minutes. Every answer comes back with its rows and reasoning, and your team's definition wherever one applies.