Ship business apps inside your product, branded as yours.
One iframe puts a full business app, a single chart or anything in between inside your product – white-labelled to your brand, authenticated through your SSO, and querying your warehouse live.
Your customers get the full experience. They never see ours.
It looks like you built it:your colours, your fonts, your domain
Astrato disappears behind your brand – no platform logos, no unfamiliar UI, no "powered by" footers.
Style every app to match your product down to the pixel and serve it from your own URL. Your customers use apps that feel like part of your product, because to them they are.
.gif)
What you can embed
Full apps
Embed a whole app – filters, drill-downs, page navigation, even writeback – with the same interactivity your team has inside Astrato. Nothing stripped out.
Individual charts
Pull a single visualisation into a product page, report, or portal where it needs to stand alone. One chart, one iframe, fully interactive.
Object groups
Curate a specific set of charts, tables, and controls into a single embed, without exposing the rest of the app. Show exactly what each audience needs to see.
With a single workbook that works for every customer, we eliminate the need to build one from scratch for each client. If a customised view is required, we can easily tailor it while maintaining the core structure
Authentication & multi-tenancy
Every customer sees only their data, without you managing access twice
Authentication
Authenticate users through JWT web tickets or your existing SSO – Auth0, Okta, SAML, Microsoft. Your customers log into your product and the analytics are just there. No second-login friction.
Multi-tenancy & data isolation
Each customer session inherits the row-level security policies in your warehouse – every user sees only their data without you managing access in a second platform.
Configure access policies in Astrato
Haven't configured security at the warehouse level yet? Astrato lets you define row-level security, roles, and access policies directly, so you can ship multi-tenant analytics without waiting on your data infrastructure to catch up.
URL parameter filtering
Control what each embed showswithout building an app per customer
Pass filters and user context into any embed through URL parameters – numeric, boolean, or string.
One app serves every customer, every segment, every view. The parameters decide what each user sees when it loads.
For your developers
Make the embed part of your product.
Real-time, two-way communication
Astrato's postMessage API lets your host application and the embedded app talk to each other in real time. React to user selections inside the embed, trigger actions in your application, or update the app dynamically based on what's happening outside it. The iframe stops being a window and starts being a component.
.gif)
Automate access at scale
Provision users automatically through SCIM and authenticate every session programmatically via the OEM API. Each new customer gets the right access without anyone setting it up manually.
6 billion rows, 1.3 seconds. Fast for ten customers or ten thousand.
Every query runs directly on your cloud warehouse – pure pushdown SQL, no data extraction, no caching layer to manage. Your embedded apps stay as fast as your warehouse allows, whether you're serving ten customers or ten thousand.
See how embedding works
Frequently asked questions
How long does it take to get an embedded app live in our product?
Once your warehouse is connected and the app is built, embedding is an iframe – copy the snippet into your product. The heavier work is upfront: modelling, styling and wiring up authentication. Teams running on Snowflake, BigQuery, Databricks, Redshift, Postgres, ClickHouse or Dremio skip the integration work.
Do our customers need to log in separately?
No. Astrato inherits authentication from your product through JWT web tickets or your existing SSO – Auth0, Okta, SAML or Microsoft. Your customers log into your product as they always have, and the embedded apps just work for whoever's signed in.
How do we make sure each customer only sees their own data?
Each customer session inherits the row-level security policies in your warehouse, so users only see what they're permitted to see — without you managing access in a second place. If you haven't configured warehouse-level security yet, you can define roles and policies directly in Astrato.
Can we embed writeback, or does interactivity get stripped out?
Writeback works inside embedded apps, along with filters, drill-downs and page navigation. A full-app embed keeps the same interactivity your team has inside Astrato – nothing is stripped out.
Will embedded apps slow down as we scale from ten customers to ten thousand?
Queries run directly on your cloud warehouse as pushdown SQL — no extraction, no caching layer to manage. Performance scales with your warehouse compute rather than with customer count. Freedom2Hear serves every customer from one parameter-driven workbook across 50 million+ rows in Snowflake.
Why not Sigma Computing embeds?
Most tools still treat embedding as an extension of dashboards: limited control over presentation, a spreadsheet-style experience that doesn't match most products, and little room to tailor what your customers see.
Astrato builds apps that feel native to your product – not an embedded worksheet.
That means:
Astrato lets you design analytics that feel native to your product — not an embedded worksheet.