Security

Your data, your key.

Each instance's data is encrypted at rest with its own key, held by our accounts service. Access is by two-factor sign-in or scoped API keys, everything is audited, and deleting an instance destroys its key.

Encrypted with its own key

Data is encrypted at rest with keys unique to your instance. The master key that unlocks them is held by our accounts service, not on the server with your data; the instance fetches it when it starts. Delete the instance and its key is destroyed, so the data and every backup of it become unreadable.

Who can do what

Everyone signs in with two-factor authentication. Roles: Read (query only), ReadWrite (load data, create tables, views and reports), Admin (manage the instance). An AI with a Read key can't change anything, export files or send email.

API keys you control

Keys expire when you say, work only from the addresses you allow, and can be revoked in one click. An allow-list can also restrict a whole instance to known networks.

Everything audited

Sign-ins, key creation and revocation, membership changes and administrative actions are logged.

Shared or dedicated

A shared instance runs on a server with other customers' instances, each with its own folder, key, access list and limits. A dedicated instance gets a server of its own. The API is the same on both.

What the AI provider sees

Only what your AI asks for and receives: the query and its results travel through your assistant. Your tables stay in mcpdata.