Security & trust
We build it. We secure it. You own it.
The storage, pipelines and dashboards we build for you run on Google Cloud, encrypted in transit, with access you control — and the data stays yours. For dashboards you bring yourself, we only embed them; we never touch your provider's permissions unless we built the asset.
Data handling
For Linked Dashboards we store the link, its detected Provider and capabilities, and hub metadata — not the analytics inside them. The underlying data stays in your own provider.
Encryption
All traffic to HunterViz is served over TLS and encrypted in transit. Data at rest lives in Google Cloud managed services with encryption enabled by default.
Authentication
Sign in with email and password or Google. Identity is provider-agnostic, so enterprise SSO can be added per contract without changing your sessions, roles or shares.
Hosting
The application runs on Google Cloud (Cloud Run), and the marketing site is served from Firebase Hosting. We rely on Google's hardened, certified infrastructure.
Access control
Owner, admin and member roles scope what each person can do in a Workspace, and per-dashboard Shares control who sees what. Members only see the dashboards they're granted.
Activity log
On every plan, each workspace's Activity shows who invited, removed or joined members, who added dashboards and who connected data sources, and when.
Provider permission model
We only touch what we own.
The single most important thing to understand about HunterViz security: the difference between a Linked Dashboard and a Managed Dashboard.
Linked Dashboards your provider
A dashboard you bring by pasting a link to an asset we don't own.
- The data stays entirely in your own provider
- We embed what's already publicly viewable; nothing more
- We never modify your Power BI, Tableau or Drive permissions
Managed Dashboards we operate
A dashboard we build and own on your behalf (e.g. Looker Studio over BigQuery).
- Full capabilities, because we control the asset
- A Share propagates a real provider permission (e.g. a Drive grant)
- Refresh runs only on infrastructure we own and operate
Where your data goes
Stated plainly.
When you ask an agent a question, HunterViz sends your question and the necessary query context to Google's Gemini models on Vertex AI. Connected data sources are ingested into workspace-isolated BigQuery datasets owned by HunterViz, while credentials and secrets are kept in Google Secret Manager. Payments, billing and subscriptions are handled securely through Stripe without payment card details ever touching HunterViz servers. For Shopify integrations, store data is read through Shopify APIs and agents can propose catalog price adjustments that only run when explicitly approved by an owner or admin. When you grant support access to a chat via Support Shares, a time-limited 14-day token is generated that logs every staff access in your personal audit log; support shares store only grant metadata, never the conversation content itself, and access can be revoked at any time.
Responsible disclosure
Found a vulnerability? We want to hear from you. Report it privately and we'll acknowledge, investigate and keep you updated. Please give us reasonable time to remediate before any public disclosure.
Have security requirements?
Tell us what your review needs and what you want built, and we'll scope it with your requirements in mind. Or start free and bring your own dashboards.