Security

Enterprise confidence for businesses and channel partners. Your data stays in your environment. Bizobix is designed for organizations that require strict control over data access and execution.

Security Philosophy

Bizobix is a decision support layer — an internal business assistant. It is not a data warehouse, a system replacement, or a data sharing platform. Security is built on a simple principle: database records never leave your environment.

What Never Leaves Your Environment

Bizobix does not transmit any of the following:

Rows & Datasets

No row-level data or actual values are sent. Your data stays in your network.

Credentials

Database credentials stay in your control.

Connection Strings

Connection details never leave your environment.

What AI Receives — And What It Never Sees

To generate SQL, the AI receives: the user's question, schema metadata (view names, column names, data types, descriptions), and company name/description for context. Schema metadata is required so the AI knows which views and columns exist. Company context helps produce relevant queries. The AI never receives raw data, rows, tables, credentials, or connection strings.

Secure Connector

The Secure Connector runs locally inside your network. It executes queries against your databases and returns only result sets to the Bizobix App. All SQL execution happens on your infrastructure. A detailed log file records each step for audit and troubleshooting.

Vendor hosted: Bizobix API, Bizobix App (PWA)

Customer hosted: Secure Connector Service, Connector Configuration App

Secure Connector architecture

Access Control

Role-based permissions mapped to approved views. Administrators define exactly what data each role can access.

Governed Access

Users see only what they are authorized to see. Queries are validated against approved views before execution. No ad-hoc access to unrestricted data.

Query Safety

Multiple layers protect your databases from misuse.

Read-Only

Queries are read-only. No writes, updates, or deletes.

Validation

Queries validated against approved schema before execution.

Limits

Row limits and resource constraints prevent runaway queries.

Timeouts

Query timeouts protect database performance.

Audit and monitoring

Audit & Monitoring

Local logs: Connector-side logs for query execution and access within your environment.

API logs: Vendor-side logs for API requests, authentication, and usage. No sensitive data included.

Full visibility for compliance and troubleshooting.

Discuss Security Requirements

Our team can walk through your specific security and compliance needs.

Contact Us