Your logo on every embedAllow exportAsk AI for viewers
An iframe snippet, or a typed React component with events and controls
Row-level security bound into each viewer’s token, on your server
Allowed domains, enforced by the API and by the browser
Embedding in your internal apps is available on the Business plan, and customer-facing embedding is part of Enterprise. Public share links are on every plan. See plans
One dashboard, every tenant, only their rows
Your server binds each viewer’s row-level security context into the token it mints. The embed can’t see or change it, and every query the embed runs is scoped by it.
Copy an iframe snippet from the Share dialog, or install the React component for auto-resize, typed events and host-side controls.
Tokens minted on your server
Your backend authenticates your user, chooses their row-level security context and mints the token. The viewer can’t see or change that context.
Allowed domains
List the sites that may render an embed. The API refuses any other host, and on DataSquares Cloud the browser refuses to frame it too.
Your logo and theme
A logo, the dashboard’s theme, a primary color and light or dark mode, with a small Powered by DataSquares credit on every embed.
Interactive, within limits you set
Embeds keep cross-filters, slicers, parameters and full screen. Show or hide the toolbar and allow or disable export for each share.
Usage you can see
Views, chart clicks, filter changes and page switches roll up per share and per day, so you know which embeds are actually used.
iframe or React
One token, two ways to embed
Per viewer
Row-level security bound into each token
Allowlisted
Rendered only on domains you approve
Inside Embedded
Control it from your app
The React component’s handle sets parameters and pages, refreshes the embed and reads its state, and typed events tell your app when the embed is ready, a chart point is clicked or filters change.
Preset parameters in the URL or from your code
Auto-resize to the content, or a fixed height
Clear error states, such as forbidden or password required
Ask AI for viewers, if you choose
Turn on Ask AI for a share and viewers get a small chat panel that answers only from that share’s own cards. It is off by default and rate-limited per share.
Your server binds a row-level security context, such as a tenant id, into each token. The viewer can’t see or change it, and every query the embed runs is scoped by it, so one dashboard can serve every tenant.
Can we remove the DataSquares credit?
No. Embeds carry your logo and theme alongside a small Powered by DataSquares credit, and they don’t accept custom CSS.
Does the domain allowlist protect the data?
It controls where an embed can be displayed. The token remains the credential, so mint it on your server, give it an expiry, and treat it like a password. Tokens can also be revoked.
Can we embed reports as well as dashboards?
Yes. The iframe and the React component render dashboards and reports, and shared reports keep their parameters.