Decide who can query what, and for how long
Cerebro is built for teams and agencies that share data across organizations. You grant query access per org or per person, with an expiry date. The same rules apply in the app, the API, the CLI, MCP and automations.
Query access
Warehouse · Postgres · read-only
| Granted to | Access | Expires |
|---|---|---|
| OrgBluefin Logistics | Their schema only | Never |
| UserContract analyst | Finance views | Dec 31 |
| OrgAudit firm | GL tables | Nov 15 |
| OrgFormer agency | Revoked | Oct 2 |
Share the dashboard without handing over the data
Agencies run many client organizations from one login with the Partner role. Share a dashboard with a client org and they see the dashboard. Whether they can query the source behind it is a separate grant, with its own expiry.
Members can be set to dashboard-only, so they view dashboards without querying sources. People who manage a shared source never see its stored credentials.
- Grants for an org or one named person
- Query and manage access granted separately
- Expiry dates and early revocation
Share · Bluefin Logistics · October retainer
- Northgate Ops PartnersOwner orgEdit
- Bluefin LogisticsClient orgView dashboard
- Bluefin finance leadPersonView · until Dec 31
Bluefin can view this dashboard. It has no query access to the warehouse.
Where the guardrails sit
Read-only connections
Static egress IPs
Sandboxed dashboards
Signed webhooks
Approval for every write
Zero Data Retention
A record of every request from outside the app
Requests from the CLI, the API and MCP are audit-logged with who made them and what they called. Changes to query grants go to an append-only log.
Dashboard version history records every change and who made it, whether that was a person, the assistant, the CLI or MCP.
Audit log
- 09:14query.run · retainer_hoursM. Okafor · ClaudeMCP
- 09:12dashboard.listM. Okafor · ClaudeMCP
- 08:57dashboard results · noi-mapBoard pack scriptAPI
- 08:40dashboard.verify · bluefin-retainerT. Garza · terminalCLI
- 08:31dashboard results · deniedExpired tokenAPI
The agent asks before it writes
The analyst can take actions in 26 connected apps, such as creating a CRM task or drafting an email. Each write shows you the app, the record and the fields, and waits for you to approve it.
Zero Data Retention is set per user, so the people who handle sensitive data can have it on while others choose any model.
Approval needed · Zoho CRM
Update contact owner
- Contact
- contact-88191
- Owner
- BDR queue
Model
26 models from 6 providers
- OpenAI
- Anthropic
- xAI Grok
- Moonshot Kimi
- Z.ai GLM
SOC 2, HIPAA and ISO 27001 are in progress
Our controls are monitored continuously through Vanta. The trust center shows the current status of each audit, the controls in place and the documents we can share.
The providers under Cerebro, for hosting, databases and AI models, hold their own SOC 2 reports today.
SOC 2 Type II
In progress
An independent audit of how we run security, availability and confidentiality, observed over a period of months rather than on one day.
HIPAA
In progress
Safeguards for protected health information, for the health organizations that run on Cerebro. Talk to us before you connect a source that holds it.
ISO 27001
In progress
An information security management system assessed against the international standard, covering people and process as well as systems.
Security FAQ
Can members connect their own apps?
Yes. Any active member can connect their own Outlook or other personal app inside the organization. Integrations the whole company shares still need an admin.
Can Cerebro change data in my database?
No. Database connections are read-only, and Cerebro blocks statements that would change data before they run.
Can a client see the raw data behind a dashboard I share with them?
Not unless you grant it. You can share a dashboard with another org so they see the dashboard, and separately decide whether they can query the source behind it.
What happens when a grant expires?
Access ends on that date in every interface: the app, the API, the CLI, MCP and automations. You can also revoke a grant early.
Who can see an embedded dashboard?
Anyone with the link, with no login. The embed sends only the numbers the page shows, never the SQL or source details. Switch the embed off and the link stops working.
Which AI models see my data?
The model you pick in the analyst. Turn on Zero Data Retention for a user and only the 22 models available under zero-retention terms are offered to them. An org admin can also restrict which models anyone in the org may use.
Is my data used to train AI models?
No. Your data is sent to a model only to answer your request, under terms that forbid training on it. With Zero Data Retention on, the provider keeps nothing after the reply.
Are you SOC 2 certified?
Not yet. SOC 2 Type II, HIPAA and ISO 27001 are in progress, with our controls monitored continuously through Vanta. The trust center shows the current status and the documents we can share. The providers under Cerebro (hosting, database, model providers) hold their own SOC 2 reports today.
What happens to a user's data when they leave?
Remove the user and their access ends everywhere at once: app, API, CLI, MCP and automations. Dashboards, queries and automations they built stay with the organization, and ownership can be handed to a teammate.
Can you handle health data?
Several health organizations run on Cerebro with de-identified or aggregate data, and HIPAA compliance is in progress. Grants, read-only connections and ZDR cover most needs; if you need a BAA or column-level masking for protected fields, talk to us before connecting the source.
Start with one source and a read-only user
Connect a single source, invite one teammate and try a grant with an expiry date before you roll Cerebro out further.