Readers per column
Salaries labeled Payroll and email addresses labeled Customer PII can sit in one table. Each is read by the people cleared for its label.
Highlights
Governance
Decide who reads classified data.
Label your sensitive data with classifications, such as Payroll or HR PII. A query from Power BI, Excel or any SQL client then returns it only to the people cleared for those classifications and to its Data Stewards. For everyone else, the query returns NULL or a masked value.
Classifications
Labels for sensitive data, reused across tables and views.
A classification labels a kind of sensitive data, and people and groups are cleared for it. Put it on any column of any table or view. Data with two classifications is readable only by people cleared for both, and by its Data Stewards.
The masked value comes from a fixed value or an expression you choose, such as one that hides part of an email address.
Groups for whole teams
Clear a group for a classification, and anyone a Data Steward later adds to the group is cleared too.
Mart views included
A Mart view that runs its query on each read follows the classifications of the data it reads. Storing its result needs a Data Warden's approval first.
Instant changes
Adding or removing a reader takes effect on their next query, with no need to reconnect.
How it works
Four gates guard your data.
The gates decide what the AI Assistant sees, who reads each value, which data enters the Vault and what leaves it.
Origin source data Consumer Power BI, Excel, any SQL client
1
AI Gate
A Data Steward can hide data from the AI Assistant without changing what people can read. Classified data is hidden from it automatically.
2
Governance Gate
A Data Steward classifies data and decides who is cleared for each classification.
3
Approval Gate
No table enters the Vault until a Data Warden approves it. Data the Data Warden forbids is never read from the source.
4
Delivery Gate
A Vault Manager can add a second set of classifications to control what the Vault delivers.
Governed by
Data Steward
Data Steward
Data Warden
Vault Manager
Access is decided as each query runs, so there is no masked copy of your data to build or keep in sync.
Access and audit
Permissions, on the record.
Named people only
Data Stewards and Data Wardens are always people, never groups.
Closed by default
A person can query only after a Data Steward grants access, and revoking it ends their open sessions.
Audit trail
Every approval, gate change and membership change is recorded. For any moment on record, the access matrix shows who could read which classified data.
See two readers query one column.
A short live demo: we classify a salary column, then query it as a colleague cleared for Payroll and as one who is not.