Your data stays
in your warehouse.

Security architecture

• No persistent table data

  Syntropic works directly against your warehouse. Table data is processed temporarily to display and write back, and is never persistently stored on our systems.

• Encryption in transit and at rest

  TLS on every connection. Our databases are encrypted at rest, and warehouse credentials and API keys get an additional layer of envelope encryption with AWS KMS.

• SAML single sign-on

  SAML 2.0 with Okta, Microsoft Entra ID, OneLogin, or any other SAML 2.0 identity provider.

• Role-based access

  Admin, Creator, Editor, and Viewer, assigned per workspace. One person can edit in one workspace and only view in another.

• Least-privilege connections

  Each connection needs only the grants for the tables it serves. Your warehouse enforces everything else.

• Full change history

  Every write is versioned with who made it, when, and the value before. Any version can be restored.