Your data never leaves the warehouse
Astrato's zero-copy architecture means no extracts, no duplication, no pipelines. The security, governance, and access controls you've already configured in your warehouse are enforced in Astrato.
Security isn't an add-on, it's the foundation
Seamless integration with SSO & OAuth
Row-level security, role-based permissions, and access controls are inherited from the source (Snowflake, BigQuery, Databricks, or other).
Consistent metrics through the semantic layer
Measures and dimensions are defined once and reused across every workbook, report, and AI insight, so "revenue" means the same thing everywhere.
Workbook lifecycle governance
Built-in controls for workbook approvals, ownership, and change tracking – no "wild west" BI.
Freedom for users, control for you
Self-service shouldn't mean giving up control. Astrato empowers business teams with drag-and-drop dashboards, writeback, AI insights, and scheduled reports – without introducing risk or governance gaps.
Every tool your users touch runs through the same governed data platform. No shadow pipelines, no unsanctioned tools, and no separate security layer to maintain. Just scalable self-service that fits cleanly into your existing cloud stack.
User access & permissions
Role-based access control (RBAC)
Define what each user can do – view dashboards, edit workbooks, design reports, export data, or administer the workspace. Permissions are assigned by role, so creators stay productive and decision-makers stay focused.
Automated user provisioning
Manage users and groups at scale through APIs and SCIM – no manual setup, no access drift, no onboarding bottleneck.
Row-level security by default (RLS)
Define what each user can see. Data visibility is inherited from your warehouse, so users only access the rows they're allowed to – whether filtered by department, region, or individual account.
Writeback permissions
Control how writeback is exposed at the workbook level – driven by variables, user groups, or permissions. Your warehouse access controls govern which writes can execute.
AI feature access
Admins choose which AI capabilities are active and which data each one can access. Insights, Copilot, measure generation, and self-service reports each have independent toggles.
Multi-tenant data isolation for embedded analytics
Astrato enforces security at both the warehouse level and the application level. Row-level filters scope each user's data visibility. Group-based permissions control what they can access. Your customers only ever see their own data – no multi-tenant leakage, no shared sessions.
Compliance you can count on
Astrato is designed to meet enterprise-grade compliance and privacy requirements from day one. Data stays in your cloud warehouse – never copied or exported – so compliance is maintained from storage to access. And to keep us sharp, we’re audited by independent third-party assessors against the industry’s most rigorous standards.
See the full library in action
