Skip to content
DataSquares
Start free

Platform

One platform, from source to insight.

Connect, prepare and analyze your data in one place. Shared definitions and access rules carry through to every dashboard, report, story and AI answer.

Book a demoSecurity overview

How the platform fits together

Data moves from your sources into a governed model, and every way of using it reads through that model. Start with dashboards and AI on the databases you run today, and add the other stages when you need them.

  1. Stage 1: Sources

    Databases, cloud warehouses, files, cloud storage and business apps: 152 connectors in the catalog.

  2. Stage 2: Bring it in

    Query sources live, upload files and pull APIs, or build pipelines that extract, transform and load on a schedule.

  3. Stage 3: Store

    Leave data where it is and query it live, or keep a managed copy that takes analytical load off production.

  4. Stage 4: Model and govern

    Data models, measures and governed metrics defined once, with access rules, quality checks, certification and lineage.

  5. Stage 5: Deliver

    The same definitions and permissions in every dashboard, report, story, AI answer, embed and phone.

    Studio, the desktop designer for Windows, designs dashboards offline and publishes them here.

Travels with the data, end to end

Govern

The controls travel with the data

Access rules are defined once, on the data model, and enforced in the query engine, so they hold wherever the data goes.

Read the security overview

Row-level security

Policies on the data model filter every query, fail-closed, beneath every chart, export, drill-down and data preview. Dashboard filters and measures can’t get around them.

Applies to: Dashboards, exports, share links and embeds, AI answers, alerts, subscriptions and the Android app. Embed tokens carry each viewer’s context; alert rules run under their creator’s permissions.

How it works: Row-level security

Field masking

Label a field as sensitive and its values are masked in the query engine for everyone but company admins. Aggregating, filtering or sorting on it is refused, so nothing leaks by inference.

Applies to: Dashboards, exports, share links, embeds and AI Chat. Activations refuse masked columns outright.

How it works: Field masking

Certification

Workspace admins certify the dashboards, models, sources and metrics people should rely on. Certified assets rank first in search.Available on the Business plan.

Applies to: Dashboard lists, source cards, the Metrics hub, AI answers, the Android app and the lineage graph.

How it works: Certification

Quality gates

A failing critical data-quality check holds publication while the last good version keeps serving. An override needs a reason and is written to the audit log.Available on the Business plan.

Applies to: Publishing dashboards, reports and data models. In pipelines, assert steps fail a run or quarantine the rows that break a rule.

How it works: Quality gates

Audit log

Governance actions are chained with SHA-256 hashes, so a changed or removed record is detectable. Every query execution is recorded too, never sampled.Export is part of the Enterprise plan.

Applies to: Sharing, data source changes, API keys, sign-ins, provisioning and quality-gate overrides. Export it as CSV for a reviewer, or as an NDJSON feed for your SIEM.

How it works: Audit log

Administer

Run it across the whole company

Identity, roles, environments and AI spend are managed in one administration area, and each part of it can be delegated on its own.

Read the administration guide

  • Single sign-on

    OpenID Connect or SAML 2.0 with your identity provider, with automatic provisioning for the email domains you approve.Part of the Enterprise plan.

  • SCIM provisioning

    Your identity provider creates, updates, suspends and removes members, and pushes groups. Every change is audited.Part of the Enterprise plan.

  • Strong sign-in

    Passkeys, authenticator codes with recovery codes, and a policy that requires two-factor authentication for every member.

  • Custom roles

    View, create, update and delete rights per area, from dashboards and models to pipelines, the Warehouse and data quality.Available on the Business plan.

  • Delegated administration

    Each administration page, from Users and Roles to Billing and the Audit log, is a permission of its own.Available on the Business plan.

  • Workspaces and groups

    Separate workspaces for production, staging or a sandbox, and groups that share dashboards and models with whole teams.

  • API keys bound to their owner

    A key can never do more than the role of the person who created it, and every key expires.

  • Environments as code

    Dashboards, models, metrics and pipelines export as definitions with no data or credentials. Review a diff, promote, restore.Importing a definition into a workspace is part of the Enterprise plan.

  • Usage and AI limits

    Usage by feature, and a monthly ceiling on the AI a workspace can use.

  • Recovery

    Deleted dashboards and reports wait in the Recovery Center for the workspace’s recovery window.

Integrate

Open to the rest of your stack

Automate the platform from your own systems and put dashboards inside your own product.

  • REST API

    Every workspace object is programmable, with API keys scoped to read, write or admin, or to named areas.

  • Webhooks

    Fired alerts, digests, failed refreshes and pipeline runs, publishing and access changes, as JSON or ready-to-post Slack messages.

  • Embed SDK

    A typed React component, and a server-side helper that mints tokens with each viewer’s row-level security context.Available on the Business plan.

See the platform on your own data.

Start a free trial in minutes, or book a walkthrough with our team.

Start freeBook a demo