Security & trust
We build it. We secure it. You own it.
The storage, pipelines and dashboards we build for you run on Google Cloud, encrypted in transit, with access you control — and the data stays yours. For dashboards you bring yourself, we only embed them; we never touch your provider's permissions unless we built the asset.
Data handling
For Linked Dashboards we store the link, its detected Provider and capabilities, and hub metadata — not the analytics inside them. The underlying data stays in your own provider.
Encryption
All traffic to HunterViz is served over TLS and encrypted in transit. Data at rest lives in Google Cloud managed services with encryption enabled by default.
Authentication
Sign in with email and password or Google. Identity is provider-agnostic, so enterprise SSO can be added per contract without changing your sessions, roles or shares.
Hosting
The application runs on Google Cloud (Cloud Run), and the marketing site is served from Firebase Hosting. We rely on Google's hardened, certified infrastructure.
Access control
Owner, admin and member roles scope what each person can do in a Workspace, and per-dashboard Shares control who sees what. Members only see the dashboards they're granted.
Activity log
On every plan, each workspace's Activity shows who invited, removed or joined members, who added dashboards and who connected data sources, and when.
Provider permission model
We only touch what we own.
The single most important thing to understand about HunterViz security: the difference between a Linked Dashboard and a Managed Dashboard.
Linked Dashboards your provider
A dashboard you bring by pasting a link to an asset we don't own.
- The data stays entirely in your own provider
- We embed what's already publicly viewable; nothing more
- We never modify your Power BI, Tableau or Drive permissions
Managed Dashboards we operate
A dashboard we build and own on your behalf (e.g. Looker Studio over BigQuery).
- Full capabilities, because we control the asset
- A Share propagates a real provider permission (e.g. a Drive grant)
- Refresh runs only on infrastructure we own and operate
Where your data goes
Stated plainly.
When you ask an agent a question, HunterViz sends your question, and the data the agent queries to answer it, to Google's Gemini models on Vertex AI. Data you connect from a data source is ingested into BigQuery datasets that HunterViz owns, one for each workspace, and the credentials for your data sources are kept in Google Secret Manager. If you ask AI to set up a data source that isn't in our catalog, what you type to describe it is sent to Anthropic's Claude to draft its connector; Claude never sees your credentials.
Responsible disclosure
Found a vulnerability? We want to hear from you. Report it privately and we'll acknowledge, investigate and keep you updated. Please give us reasonable time to remediate before any public disclosure.
Have security requirements?
Tell us what your review needs and what you want built, and we'll scope it with your requirements in mind. Or start free and bring your own dashboards.