https://www.askyourdatabase.com/_next/static/chunks/pages/docs/security-c9e1a43aae9869c8.js

1(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[9277],{27618:function(e,t,n){(window.__NEXT_P=window.__NEXT_P||[]).push(["/docs/security",function(){return n(22657)}])},44475:function(e,t,n){"use strict";var s=n(11527),o=n(70965),a=n.n(o),i=n(32715),r=n(21035);let c={logo:(0,s.jsxs)("div",{style:{flex:1,display:"flex",alignItems:"center",gap:16},children:[(0,s.jsx)(a(),{src:"/logo-light.png",alt:"AskYourDatabase logo",width:"30",height:"30",className:"mr-4 rounded-sm p-1"}),(0,s.jsx)("p",{style:{fontWeight:"bold",fontSize:16},children:"AskYourDatabase"})]}),chat:{link:"https://discord.com/invite/AZ2WnRxTD8"},footer:{text:"AskYourDatabase \xa9 2023"},useNextSeoProps(){let{asPath:e}=(0,i.useRouter)(),t=e.split(/[?#]/)[0].replace(/\/$/,"")||"/";return{canonical:"https://www.askyourdatabase.com".concat(t),titleTemplate:"%s – AskYourDatabase"}},head:()=>{let{asPath:e,defaultLocale:t,locale:n}=(0,i.useRouter)(),{frontMatter:o}=(0,r.ZR)(),a="https://www.askyourdatabase.com"+(t===n?e:"/".concat(n).concat(e)).split(/[?#]/)[0].replace(/\/$/,"");return(0,s.jsxs)(s.Fragment,{children:[(0,s.jsx)("meta",{property:"og:url",content:a}),(0,s.jsx)("meta",{property:"og:title",content:o.title||"AskYourDatabase"}),(0,s.jsx)("meta",{property:"og:description",content:o.description||"AskYourDatabase - the ChatGPT for SQL"})]})},i18n:[{locale:"en-US",text:"English"}]};t.Z=c},22657:function(e,t,n){"use strict";n.r(t),n.d(t,{__toc:function(){return c}});var s=n(11527),o=n(94482),a=n(21035),i=n(44475);n(15954);var r=n(12175);let c=[{depth:2,value:"Desktop App: Local Processing for Maximum Security",id:"desktop-app-local-processing-for-maximum-security"},{depth:2,value:"Chatbot: Cloud-Based Solution with Robust Security Measures",id:"chatbot-cloud-based-solution-with-robust-security-measures"},{depth:2,value:"Data Collection Summary",id:"data-collection-summary"},{depth:3,value:"Desktop App",id:"desktop-app"},{depth:3,value:"Chatbot",id:"chatbot"},{depth:2,value:"Commitment to Security and Compliance",id:"commitment-to-security-and-compliance"},{depth:3,value:"SOC 2 Type 2 Audit",id:"soc-2-type-2-audit"}];function d(e){let t=Object.assign({h1:"h1",p:"p",h2:"h2",ol:"ol",li:"li",strong:"strong",ul:"ul",a:"a",h3:"h3"},(0,r.a)(),e.components);return(0,s.jsxs)(s.Fragment,{children:[(0,s.jsx)(t.h1,{children:"Security Portal"}),"\n",(0,s.jsx)(t.p,{children:"At AskYourDatabase, we offer two main products: the Desktop App and the Chatbot. Both are designed with strong security measures to protect your sensitive data. Here's how each product operates and handles your information:"}),"\n",(0,s.jsx)(t.h2,{id:"desktop-app-local-processing-for-maximum-security",children:"Desktop App: Local Processing for Maximum Security"}),"\n",(0,s.jsx)(t.p,{children:"Our Desktop App is designed to keep your data as close to you as possible:"}),"\n",(0,s.jsxs)(t.ol,{children:["\n",(0,s.jsxs)(t.li,{children:["\n",(0,s.jsxs)(t.p,{children:[(0,s.jsx)(t.strong,{children:"Local Database Connection"}),": Your database credentials are stored locally on your computer. The connection to your database is established directly from your local machine."]}),"\n"]}),"\n",(0,s.jsxs)(t.li,{children:["\n",(0,s.jsxs)(t.p,{children:[(0,s.jsx)(t.strong,{children:"AI API Interaction (Anthropic by default)"}),": When you ask a question, it's sent to our AI provider’s API (Anthropic by default, OpenAI as an alternative) through our secure gateway. The provider then generates SQL queries or natural language responses."]}),"\n"]}),"\n",(0,s.jsxs)(t.li,{children:["\n",(0,s.jsxs)(t.p,{children:[(0,s.jsx)(t.strong,{children:"Local Query Execution"}),": If a SQL query is generated, it's executed locally on your machine against your database."]}),"\n"]}),"\n",(0,s.jsxs)(t.li,{children:["\n",(0,s.jsxs)(t.p,{children:[(0,s.jsx)(t.strong,{children:"Minimal Data Transfer"}),": Only the necessary response data is sent back to the AI provider (Anthropic by default) for further analysis and explanation."]}),"\n"]}),"\n",(0,s.jsxs)(t.li,{children:["\n",(0,s.jsxs)(t.p,{children:[(0,s.jsx)(t.strong,{children:"No Data Storage"}),": Our gateway does not store any intermediate data, especially your conversation information."]}),"\n"]}),"\n",(0,s.jsxs)(t.li,{children:["\n",(0,s.jsxs)(t.p,{children:[(0,s.jsx)(t.strong,{children:"AI Providers' Privacy Commitments"}),":"]}),"\n",(0,s.jsxs)(t.ul,{children:["\n",(0,s.jsxs)(t.li,{children:[(0,s.jsx)(t.strong,{children:"OpenAI"}),": OpenAI has committed not to use API Platform conversation data for model training. For more details, visit ",(0,s.jsx)(t.a,{href:"https://openai.com/enterprise-privacy/",children:"OpenAI's Enterprise Privacy page"}),"."]}),"\n",(0,s.jsxs)(t.li,{children:[(0,s.jsx)(t.strong,{children:"Anthropic"}),": Anthropic also commits not to use customer data for model training. For more information, visit ",(0,s.jsx)(t.a,{href:"https://privacy.anthropic.com/en/articles/7996868-is-my-data-used-for-model-training",children:"Anthropic's Privacy page"}),"."]}),"\n"]}),"\n"]}),"\n"]}),"\n",(0,s.jsx)(t.p,{children:"In essence, with the Desktop App, your database credentials never leave your local environment, and only the conversation data is sent to our AI provider's API (Anthropic by default)."}),"\n",(0,s.jsx)(t.h2,{id:"chatbot-cloud-based-solution-with-robust-security-measures",children:"Chatbot: Cloud-Based Solution with Robust Security Measures"}),"\n",(0,s.jsx)(t.p,{children:"Our Chatbot product operates in the cloud, requiring a different set of security measures:"}),"\n",(0,s.jsxs)(t.ol,{children:["\n",(0,s.jsxs)(t.li,{children:["\n",(0,s.jsxs)(t.p,{children:[(0,s.jsx)(t.strong,{children:"Secure Credential Handling"}),": You provide us with your database credentials, which we encrypt using a private key. We never store these credentials in plain text."]}),"\n"]}),"\n",(0,s.jsxs)(t.li,{children:["\n",(0,s.jsxs)(t.p,{children:[(0,s.jsx)(t.strong,{children:"Whitelisted Access"}),": You need to whitelist our fixed IP Gateway service in your database firewall."]}),"\n"]}),"\n",(0,s.jsxs)(t.li,{children:["\n",(0,s.jsxs)(t.p,{children:[(0,s.jsx)(t.strong,{children:"TLS Encryption"}),": All connections between our service and your database occur over TLS, ensuring data in transit is secure."]}),"\n"]}),"\n",(0,s.jsxs)(t.li,{children:["\n",(0,s.jsxs)(t.p,{children:[(0,s.jsx)(t.strong,{children:"Access Control Recommendations"}),": We highly recommend whitelisting only our IP and using a read-only user if only SELECT queries are needed."]}),"\n"]}),"\n",(0,s.jsxs)(t.li,{children:["\n",(0,s.jsxs)(t.p,{children:[(0,s.jsx)(t.strong,{children:"Query Sanitization"}),": We sanitize AI-generated SQL queries to prevent potential security issues."]}),"\n"]}),"\n",(0,s.jsxs)(t.li,{children:["\n",(0,s.jsxs)(t.p,{children:[(0,s.jsx)(t.strong,{children:"Customizable Access"}),": You can disable access to specific tables and implement row-level policies to restrict user-level permissions."]}),"\n"]}),"\n",(0,s.jsxs)(t.li,{children:["\n",(0,s.jsxs)(t.p,{children:[(0,s.jsx)(t.strong,{children:"Data Storage"}),": Due to the nature of the Chatbot, we do store conversation records and your encrypted credentials."]}),"\n"]}),"\n",(0,s.jsxs)(t.li,{children:["\n",(0,s.jsxs)(t.p,{children:[(0,s.jsx)(t.strong,{children:"On-Premise Deployment Option"}),": If your organization cannot accept cloud-based data storage due to strict security policies, we offer a comprehensive on-premise deployment solution. This allows you to keep all your data within your network perimeter while still enjoying the full functionality of our Chatbot. For more details, please refer to our ",(0,s.jsx)(t.a,{href:"/docs/on-prem",children:"On-Premise Deployment documentation"}),"."]}),"\n"]}),"\n",(0,s.jsxs)(t.li,{children:["\n",(0,s.jsxs)(t.p,{children:[(0,s.jsx)(t.strong,{children:"Enterprise Solutions"}),": We offer enterprise-grade private deployment solutions for organizations with stricter data locality requirements."]}),"\n"]}),"\n",(0,s.jsxs)(t.li,{children:["\n",(0,s.jsxs)(t.p,{children:[(0,s.jsx)(t.strong,{children:"Data Deletion Rights"}

1),": You have the right to request deletion of all your data stored on our platform."]}),"\n"]}),"\n"]}),"\n",(0,s.jsxs)(t.p,{children:["For information about our service providers and data processors, please visit our ",(0,s.jsx)(t.a,{href:"/docs/subprocessors",children:"Sub-processors page"}),"."]}),"\n",(0,s.jsx)(t.h2,{id:"data-collection-summary",children:"Data Collection Summary"}),"\n",(0,s.jsx)(t.h3,{id:"desktop-app",children:"Desktop App"}),"\n",(0,s.jsxs)(t.ul,{children:["\n",(0,s.jsx)(t.li,{children:"Collects: User queries"}),"\n",(0,s.jsx)(t.li,{children:"Does not collect: Database credentials, query results"}),"\n"]}),"\n",(0,s.jsx)(t.h3,{id:"chatbot",children:"Chatbot"}),"\n",(0,s.jsxs)(t.ul,{children:["\n",(0,s.jsx)(t.li,{children:"Collects: User queries, conversation history, encrypted database credentials"}),"\n",(0,s.jsx)(t.li,{children:"Does not collect: Plain text database credentials, full query results"}),"\n"]}),"\n",(0,s.jsx)(t.p,{children:"Both products are designed with your data security in mind, offering different levels of control and protection based on your specific needs and requirements."}),"\n",(0,s.jsxs)(t.p,{children:["For more information on how to get started with AskYourDatabase, please refer to our ",(0,s.jsx)(t.a,{href:"/docs",children:"Getting Started guide"}),"."]}),"\n",(0,s.jsx)(t.h2,{id:"commitment-to-security-and-compliance",children:"Commitment to Security and Compliance"}),"\n",(0,s.jsx)(t.p,{children:"At AskYourDatabase, we are committed to maintaining the highest standards of security and compliance to protect your data. We are pleased to announce that we have initiated the SOC 2 Type 2 audit process, demonstrating our dedication to robust security practices and data protection."}),"\n",(0,s.jsx)(t.h3,{id:"soc-2-type-2-audit",children:"SOC 2 Type 2 Audit"}),"\n",(0,s.jsx)(t.p,{children:"We have begun the rigorous process of obtaining SOC 2 Type 2 compliance certification. This comprehensive audit examines our security controls, processes, and procedures over an extended period, typically 6-12 months. The SOC 2 Type 2 report will provide detailed information about how we manage customer data, focusing on the security, availability, processing integrity, confidentiality, and privacy of our systems."}),"\n",(0,s.jsxs)(t.p,{children:["We anticipate ",(0,s.jsx)(t.strong,{children:"receiving our first complete SOC 2 Type 2 compliance report in December 2025"}),". This timeline allows for a thorough examination of our systems and practices, ensuring that we meet the stringent requirements set forth by the American Institute of Certified Public Accountants (AICPA)."]}),"\n",(0,s.jsx)(t.p,{children:"By pursuing SOC 2 Type 2 compliance, we aim to:"}),"\n",(0,s.jsxs)(t.ol,{children:["\n",(0,s.jsx)(t.li,{children:"Validate our existing security measures"}),"\n",(0,s.jsx)(t.li,{children:"Identify and address any potential vulnerabilities"}),"\n",(0,s.jsx)(t.li,{children:"Provide our customers with additional assurance regarding our data protection practices"}),"\n",(0,s.jsx)(t.li,{children:"Demonstrate our ongoing commitment to maintaining a secure and compliant environment"}),"\n"]}),"\n",(0,s.jsx)(t.p,{children:"We look forward to sharing more details about our SOC 2 Type 2 compliance journey as we progress through the audit process. This certification will be a significant milestone in our continuous efforts to ensure the security and privacy of your data."})]})}let l={MDXContent:function(){let e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},{wrapper:t}=Object.assign({},(0,r.a)(),e.components);return t?(0,s.jsx)(t,{...e,children:(0,s.jsx)(d,{...e})}):d(e)},pageOpts:{filePath:"pages/docs/security.mdx",route:"/docs/security",timestamp:1783764645e3,pageMap:[{kind:"Meta",data:{index:{type:"page",title:"Nextra",display:"hidden",theme:{layout:"raw"}},docs:{type:"page",title:"Documentation"}}},{kind:"Folder",name:"docs",route:"/docs",children:[{kind:"Meta",data:{"-- Tutorial":{type:"separator",title:"Tutorial"},index:"Getting Started",tips:"Get better answer",train:"Train to get better answer",connect:"Prepare Database Connection String","sample-db":"Sample Databases",webhook:"Webhook","-- Privacy, Data Protection, and Security":{type:"separator",title:"Privacy, Data Protection, and Security"},security:"Security Portal","privacy-policy":"Privacy Policy","terms-and-conditions":"Terms and Conditions",subprocessors:"Sub-processors","-- Website Chatbot":{type:"separator",title:"Website Chatbot"},chatbot:"Getting Started","access-control":"Access control","chatbot-custom-style":"Custom Style","chatbot-embed":"Embed Chatbot","chatbot-db-switching":"Database Switching (Multiple Tenants)","ban-chatbot-user":"Ban/Unban Chatbot User","-- WhatsApp Integration":{type:"separator",title:"WhatsApp Integration"},"whatsapp-setup":"WhatsApp Business Setup","-- Dashboard":{type:"separator",title:"Dashboard"},dashboard:"Getting Started","dashboard-embed":"Embed Dashboard","-- API Reference":{type:"separator",title:"API Reference"},"api-authentication":"API Authentication","api-ask":"Ask API","api-messages":"Messages API","api-new-chat":"New Chat API","-- Enterprise":{type:"separator",title:"Enterprise"},"on-prem":"On-Premise Deployment","-- Changelog":{type:"separator",title:"Changelog"},"v1.1.13":"v1.1.13","v1.1.121":"v1.1.121"}},{kind:"MdxPage",name:"access-control",route:"/docs/access-control"},{kind:"MdxPage",name:"api-ask",route:"/docs/api-ask"},{kind:"MdxPage",name:"api-authentication",route:"/docs/api-authentication"},{kind:"MdxPage",name:"api-messages",route:"/docs/api-messages"},{kind:"MdxPage",name:"api-new-chat",route:"/docs/api-new-chat"},{kind:"MdxPage",name:"ban-chatbot-user",route:"/docs/ban-chatbot-user"},{kind:"MdxPage",name:"chatbot-custom-style",route:"/docs/chatbot-custom-style"},{kind:"MdxPage",name:"chatbot-db-switching",route:"/docs/chatbot-db-switching"},{kind:"MdxPage",name:"chatbot-embed",route:"/docs/chatbot-embed"},{kind:"MdxPage",name:"chatbot",route:"/docs/chatbot"},{kind:"MdxPage",name:"connect",route:"/docs/connect"},{kind:"MdxPage",name:"dashboard-embed",route:"/docs/dashboard-embed"},{kind:"MdxPage",name:"dashboard",route:"/docs/dashboard"},{kind:"MdxPage",name:"index",route:"/docs"},{kind:"MdxPage",name:"on-prem",route:"/docs/on-prem"},{kind:"MdxPage",name:"privacy-policy",route:"/docs/privacy-policy"},{kind:"MdxPage",name:"sample-db",route:"/docs/sample-db"},{kind:"MdxPage",name:"security",route:"/docs/security"},{kind:"MdxPage",name:"subprocessors",route:"/docs/subprocessors"},{kind:"MdxPage",name:"terms-and-conditions",route:"/docs/terms-and-conditions"},{kind:"MdxPage",name:"tips",route:"/docs/tips"},{kind:"MdxPage",name:"train",route:"/docs/train"},{kind:"MdxPage",name:"v1.1.121",route:"/docs/v1.1.121"},{kind:"MdxPage",name:"v1.1.124",route:"/docs/v1.1.124"},{kind:"MdxPage",name:"v1.1.13",route:"/docs/v1.1.13"},{kind:"MdxPage",name:"v1.1.135",route:"/docs/v1.1.135"},{kind:"MdxPage",name:"v1.1.136",route:"/docs/v1.1.136"},{kind:"MdxPage",name:"webhook",route:"/docs/webhook"},{kind:"MdxPage",name:"whatsapp-setup",route:"/docs/whatsapp-setup"}]}],flexsearch:{codeblocks:!0},title:"Security Portal",headings:c},pageNextRoute:"/docs/security",nextraLayout:a.ZP,themeConfig:i.Z};t.default=(0,o.j)(l)},45184:function(){}},function(e){e.O(0,[4478,2888,9774,179],function(){return e(e.s=27618)}),_N_E=e.O()}]);