Your data deserves better than a checkbox.
At WeQuery, security isn't a feature, it's the base architecture. Here's exactly how we protect your data.
End-to-end encryption
All your connection credentials (passwords, tokens, API keys) are encrypted with AES-256 before storage. Encryption keys are kept separate from the data and are never exposed. Decryption only happens at the moment of connecting to your database, never otherwise.
Read-only, by design
WeQuery only executes read queries. Any attempt to modify, delete, or alter your data is automatically blocked server-side, regardless of the AI model used. Your data can never be modified through WeQuery.
Total isolation between organizations
Each organization is strictly isolated at the database level. A user can only access data from their own organization. This isolation is enforced directly at the database engine level, not just at the application level.
Authentication verified on every request
Every request to WeQuery is authenticated with a secure token. The user's identity, organization, and permissions are automatically verified. No action is possible without valid authentication.
Your data stays with you
WeQuery connects to your database to run read-only queries. Results transit encrypted for display. We never permanently store your business data, only conversation history is kept.
Protection against web attacks
WeQuery automatically applies security best practices: protection against clickjacking, session theft, content injection, and data leaks. All connections are over HTTPS.
BigQuery cost control
For BigQuery connections, WeQuery estimates the cost of each query before executing it. If the estimated cost exceeds a threshold you define, an alert warns you before execution. You maintain full control over your cloud costs.
No data used for AI training
Your queries, results, and data are never used to train, fine-tune, or improve AI models. What goes through WeQuery stays strictly within the scope of your session.
Granular role-based access
Each member of your organization has a role (admin or member). Only admins can add connections, manage members, and configure alerts. Members only have access to chat and dashboards.
Audit logs and traceability
Every action is timestamped and linked to the user who performed it. You can review the full history of queries executed by your team for internal compliance.
Infrastructure hosted in Europe
Our servers and databases are hosted in the European Union. Your data never leaves the European Economic Area, in compliance with GDPR.
Automatic session rotation
User sessions expire automatically after a period of inactivity. Connection tokens have a limited lifespan and are renewed automatically to minimize risk in case of compromise.