Security Overview

Security Overview

Querio connects to your data warehouse, runs analysis for your team, and stores the notebooks, dashboards and files you create. This page covers how we protect each part. Our SOC 2 Type II report, policies and sub-processor list are in the Trust Center.

Compliance

• SOC 2 Type II. Request the report in the Trust Center.
• GDPR and CCPA. We sign a Data Processing Agreement (DPA) at onboarding.
• Health data. Tell us before you connect protected health information. We sign a Business Associate Agreement (BAA) first.

Your data warehouse

• Querio queries your warehouse in place, through a database user you create and control. Give it read-only access and Querio can't change your data.
• Connect directly over SSL/TLS, through an SSH tunnel, or with IP allowlisting.
• Data source credentials are encrypted with AES-256-GCM.

Data we store

• Querio stores what your team creates in its workspace: notebooks, dashboards, files and conversation history.
• Workspace files are encrypted at rest with AES-256, and public access to storage is blocked.
• Data in transit is encrypted with HTTPS/TLS.
• When you leave, we return or delete your workspace data within 30 days of your request.

AI and your data

• To answer a question, the model sees your question, your schema and metadata, and the query results it needs. It never sees your database credentials.
• We use commercial model APIs whose terms don't allow training on your data.
• On Enterprise, AI inference runs on AWS Bedrock.
• Code the AI writes runs in an isolated sandbox with no internet access.

Access control

• Sign in with SSO over OIDC.
• Control who sees what with roles, groups and data source permissions.

Availability

• Live status and incident history are at status.querio.ai.
• Core and Enterprise include a 99.5% monthly uptime commitment. See the Terms of Service.

Monitoring and vulnerability management

• We monitor our infrastructure, code and logs, and run scanning tools to find and fix issues.
• We run internal vulnerability assessments, with a team ready to respond.

People

• Our security policies cover development practices, testing and staff training.
• Staff accounts require multi-factor authentication.