Security

How we keep your reports private.

One company can never see another's reports, and your admins can see every change made in your portal.

Your data stays separate

Each company's reports live in their own space in the Power BI service, separate from every other company's
Every record in the portal belongs to exactly one company, and every page checks it
Automated tests check, on every change, that one company can't see another's data

We never store your data source passwords

Data source passwords and keys go straight to Microsoft's Power BI service, which stores them encrypted
They're never saved in our database, our logs or our exports
We recommend a dedicated, read-only reporting account for each source

Strong sign-in

Two-step sign-in is required for admins and account owners, and available to everyone
Passwords are at least 12 characters; reset links work once and expire after an hour
We slow down repeated failed sign-ins and log them

Each person sees only what you share

Nothing is visible until an admin shares it
With row-level security, if a report has roles and a person has none, they see nothing
Viewers see reports only inside your portal. They don't get access to the Power BI service

Everything is logged

Your admins see an activity log: sign-ins, invitations, sharing, uploads and settings changes
If our staff ever need to look at your portal to help you, they give a reason, the visit is time-limited and read-only by default, and it appears in your activity log

Hosted in the United States

The portal and your reports run in Microsoft Azure, in the Central US region
Every connection uses HTTPS, and Azure encrypts the data it stores

Leave whenever you like

Ask for a full export of your data, including every report version you uploaded
When you leave, we delete your reports, files and records after the period the Terms describe

Not for patient health information

The service isn't built for health data. Please don't upload reports that contain patient health information.

Details are in our Data Processing Agreement andPrivacy Policy.

Security questions?

Email us and we'll answer them ourselves.