Built to be handed your customers' data.
Governance isn't a setting you switch on — it runs through every query, every share, and every scheduled send.
Encrypted & authenticated
Connection credentials sealed at rest; role-based login with revocable sessions; HTTPS, secure cookies, security headers, and login rate-limiting.
Row-level security that fails closed
Each viewer sees only the rows they're entitled to, enforced server-side inside the query. If a policy can't resolve, it shows nothing rather than leaking.
Governed AI
The assistant reads only approved data through a guarded query layer with a read-only allow-list. It can't run arbitrary commands or reach beyond what you permit.
We never train on your data
Your data is used only to answer your questions. Neither Qeries nor its model providers train models on your data, and it is never shared across organizations.
Access control that holds
Grant access by person or group at the dashboard, folder, or data-source level, with a clear deny-wins model and request-and-approve sharing. No "anyone with the link".
Isolated by organization
Every client is a walled workspace with its own users, data, connections, and dashboards. Nothing is shared or visible across the boundary.
Hosted in the EU · data residency
Your data stays in-region, hosted in the EU by default. Dedicated instances, in-country hosting, or deployment in your own cloud are available for regulated clients.
Audit & cost control
Logins, permission changes, shares, and scheduled sends are recorded per workspace, and AI usage is rate-limited with a hard spend ceiling.
Straight about where we are.
We're in private preview and won't claim certifications we don't yet hold. Here's the honest state — and where we're headed.
GDPR-aligned, EU-hosted
Data is hosted in the EU by default and handled in line with GDPR principles — data minimisation, purpose limitation, and your right to deletion.
SOC 2 readiness in progress
We're building toward SOC 2 and will publish our status transparently. In the meantime we're glad to walk security teams through our controls.
Self-hosted & your-cloud deployment
Regulated clients can run Qeries as a dedicated instance in a chosen region, or inside their own cloud account, for full control of data residency.
SSO / SAML on the roadmap
Single sign-on and SCIM provisioning are on the roadmap for enterprise identity. Role-based access and revocable sessions are available today.
