01 / Security & governance
Least privilege, everywhere the data goes.
Helixoy enforces role-based access control and governance across analysis, dashboards and applications, so sensitive data stays protected and compliance requirements are met by default.
Role-based access control
Define roles once and apply them across every dataset, dashboard and app. Permissions follow the data into embeds, exports and APIs.
Row- and column-level policies
Restrict what each role can see down to individual rows and fields, without duplicating datasets.
Audit trail & lineage
Every query, view, change and export is logged. Trace any number back to its source in one click.
Encryption
Data is encrypted in transit and at rest. Bring your own keys on self-hosted and dedicated deployments.
SSO & identity
SAML and OIDC single sign-on, SCIM provisioning and MFA enforcement through your existing identity provider.
Data residency
Choose the cloud region your data lives in, or keep everything inside your own infrastructure.
02 / Governance
Governance that doesn't slow people down.
Certified datasets, a shared semantic layer and approval workflows mean business users can self-serve confidently, while the data team keeps control of definitions and access.
- Certified and deprecated states for datasets and dashboards
- Approval steps before publishing to shared spaces
- Scheduled access reviews with one-click revocation
- Retention rules and export controls per workspace
Role: Regional finance
- Datasets
- Revenue, Pipeline (certified)
- Rows
- region = user.region
- Columns
- customer_email hidden
- Export
- CSV only, watermarked
- Reviewed
- Quarterly · next Nov 2026
03 / Resilience
Resilience and availability
Helixoy runs on a distributed architecture that pools resources from multiple nodes. Workloads fail over automatically, and the platform is designed to keep serving through the loss of an entire cloud or region without interruption. Backups are continuous and restorable to a point in time.
Compliance
Helixoy is built to help customers meet their obligations under GDPR and comparable frameworks, with data-processing agreements available on request. Contact hello@helixoy.com for our security documentation and current certifications.
Need a security review before you start?
We can walk your security team through architecture, controls and deployment options.