Below is an overview of how SenseQL addresses data protection:

1. Secure Data Handling
   Only metadata and query structures are processed unless explicitly allowed.
   In-database processing ensures queries run directly within connected systems (e.g., BigQuery), so your data never leaves its secure environment.

   
   

2. Encryption & Access Control
   Data in Transit: Encrypted with TLS 1.2+ for all API calls and connections.
   Data at Rest: Protected by your database’s encryption (e.g., BigQuery) plus SenseQL’s encrypted context storage.
   Role-Based Access Control (RBAC): Define granular permissions for databases, analytics, and visualizations.

   
   

3. Compliance Readiness
   Aligned with GDPR, HIPAA, and SOC 2 frameworks.
   Follows data minimization principles to limit unnecessary processing.

   
   

4. Context Isolation
   Tenant-isolated environments ensure no cross-client data leakage.
   Business context, KPIs, and schema knowledge remain private per client.

   
   

5. Audit & Transparency
   All generated queries and analytics are logged and auditable.
   Explainability features let teams review AI interpretations and optimization logic.

   
   

6. Optional On-Prem / VPC Deployment
   For highly regulated industries, SenseQL can be deployed inside private cloud or VPC environments for full data control.