Security
Security details for teams connecting live databases
This page covers the protections QueryCanvas supports today. It is intentionally limited to verified product behavior rather than aspirational compliance claims.
Encrypted credentials
QueryCanvas encrypts stored connection credentials before they are persisted, helping reduce exposure of raw secrets at rest.
TLS-enabled connections
Database and service connectors support SSL/TLS in transit so teams can connect to protected infrastructure with encrypted transport.
Direct execution model
QueryCanvas is designed around querying the connected source directly instead of copying your full dataset into a separate analytics warehouse.
Workspace controls and support
Role-based workspaces, billing controls, and support channels help organizations manage access and escalate questions when needed.