Your data. Your controls.
Choose which data Embrasure can access and who can use it. We’ll work with your team to review the configuration before you connect.
Where your data lives
Query Snowflake or BigQuery directly, or use DuckDB with Iceberg tables in your own storage buckets or Embrasure-managed storage. You choose which tables to sync.
Embrasure also stores workspace context, saved definitions, and query results needed to provide the service. Our privacy policy explains how we handle and retain that information.
Access and identity
Workspace roles and data policies control access to sources and queries. SAML SSO, SCIM provisioning, column masking, and administrative audit logs are available.
Warehouse queries use the configured role or service account. They don’t automatically inherit each person’s warehouse permissions. Set up sign-in and access.
Encryption
Connections use encryption in transit. Stored data and connector credentials are encrypted at rest. Give each connection only the permissions it needs.
Security reviews
SOC 2 Type 2 is in progress. An engagement letter is available under NDA. Our Data Processing Addendum and subprocessor list are public; contact us for other security documentation.
HIPAA workloads require an approved configuration and verified business associate agreements before protected health information is connected.
Report a concern
Send vulnerability reports to security@embrasure.ai. Include what you found, steps to reproduce it, and the potential impact.
For other security, privacy, or ethics concerns, use our confidential reporting channel.