Where it runs
Self-host QueryDesk in your own Kubernetes cluster with the Helm chart, or have us run a dedicated Installation for you, with its own namespace and database, in Google Cloud’s us-central1 region. A self-hosted Installation keeps your credentials, query history and results in your infrastructure, with no support tunnel and no vendor access.
Credentials are never handed out
Database passwords are encrypted with AES-256-GCM under a key only your Installation holds. They are never shown again, returned by the API or sent to a browser. People are granted the right to run queries through a credential, not the credential itself.
Every query is reviewable and recorded
QueryDesk parses every query and classifies it as a read or a write, and anything it cannot parse counts as a write. A credential can require peer review before a query runs, and editing the SQL voids the approvals. The audit log records who ran each query, through which credential, and who approved it.
Protected columns never leave the database
Data protection policies rewrite a query before it runs, so the database returns ‘***’ in place of a protected column, WHERE clauses included. With a policy assigned, columns stay hidden unless it allows them, and a statement the rewriter cannot model is refused.
Sign-in and permissions
OIDC single sign-on with your directory’s groups mapped to roles, passkeys an organization can require, and API keys stored hashed, each with its own permissions and an optional expiry. Every record is scoped to its organization.
What leaves a self-hosted Installation
A license check, signed with the Installation’s own key, that carries the organization’s name, VAT ID and billing address, the email addresses holding seats, and the dates it first reached setup steps such as connecting a database. Error reports to Sentry, with the stack trace and the request that failed. Your database credentials, the data you query, your query history and your results go nowhere.
Subprocessors
The services that process Customer Data for QueryDesk are listed on the subprocessors page.
Certifications and reports
QueryDesk has commenced SOC 2 Type II audit preparation. For its current status, a security questionnaire, or to report a vulnerability, email security@querydesk.com.