Security and compliance
Access is default-deny and enforced per member, down to individual tables, on the server rather than in the browser. Nothing about a workspace’s data or permissions is retained once everyone has signed out.
- A new member has no data access until an admin grants it
- Grants are per data source and can be narrowed to named tables or sheets
- Connections and encrypted credentials are deleted when the last person signs out
- An audit trace of who requested and approved access outlives the data
- Rate limiting on authentication and data-connection endpoints