Security

Chata.ai Never Sees Your Data

Chata.ai Never Sees
Your Data

Chata.ai Never Sees Your Data

Chata.ai trains on your schema structure, not your data. It generates a database query. Your database returns the answer.

Book a Walkthrough

Request Security Documentation

ISO 27001 Certified

SOC 2 Type II Certified

ISO 27001 Certified

SOC 2 Type II Certified

Tech Dark Background With Blue and Purple Accents

How a Question Becomes an Answer

Question Comes in

A user types a question in plain English. That's the only input. No data is uploaded, no files are shared.

Question Comes in

A user types a question in plain English. That's the only input. No data is uploaded, no files are shared.

Question Comes in

A user types a question in plain English. That's the only input. No data is uploaded, no files are shared.

Gets Translated to SQL

Chata.ai translates the question into your database's native query language. It reads your schema, never your data.

Gets Translated to SQL

Chata.ai translates the question into your database's native query language. It reads your schema, never your data.

Gets Translated to SQL

Chata.ai translates the question into your database's native query language. It reads your schema, never your data.

Your Database Responds

Your database executes the SQL and returns the answer. The AI job is fully done before any data is read.

Your Database Responds

Your database executes the SQL and returns the answer. The AI job is fully done before any data is read.

Your Database Responds

Your database executes the SQL and returns the answer. The AI job is fully done before any data is read.

Chata.ai trains on table names, columns, and relationships. It learns the structure. It never sees the content in your rows.

Your Data Never Leaves Your Environment

Chata.ai runs where your data lives. During implementation, we connect through a read-only credential. No bulk data transfer, no data replication, no access to anything beyond schema metadata.

Your Cloud

Deploys inside your Azure, AWS, or GCP account. Chata.ai operates within your network boundary. Data doesn't route through our infrastructure at any point.

On-Premises

Deploys on your infrastructure via Kubernetes. Runs on your hardware, on your network. Nothing touches an external endpoint.

Also available as edge deployment for streaming and real-time use cases, or multi-tenant SaaS with logical tenant isolation. Talk to us about what fits your environment.

Talk to the team

Users Only See What They're Allowed To See

Users Only See What
They're Allowed To See

Chata.ai deploys inside your environment and connects directly to the access controls you already have in place. Your identity provider remains the single source of truth. No duplicate permission systems, no extra configuration from your team.

+ any SAML / OAuth / OIDC provider

Certified and Auditable

ISO 27001

Information security management certified to ISO/IEC 27001:2022.

SOC 2 Type II

Independent audit confirming security, availability, and confidentiality controls.

Full Audit Trail

Every query, every access event, every result logged with timestamps and user identity.

Policy-Driven Validation

Each query is validated against your security policies, and out-of-scope queries are blocked before execution.

SSO via SAML, OAuth, and OpenID Connect. Role-based access control aligned with your existing permission model.

Info-Tech Research Group's Review

Customer data never enters the training process. The model is built from the schema, not the underlying data. That distinction matters enormously for any organization operating under data residency or privacy requirements.

Igor Ikonnikov

Advisory Fellow, Data and Analytics, Info-Tech Research Group

About Security at Chata.ai

Security is a top priority at Chata.ai. We take several measures to help ensure every implementation of AutoQL is secure and meets the highest standards of data protection.

AutoQL Security Architecture is built on four foundational layers:

Integrator Partner Security & Network Connectivity – Secure communication protocols between partner systems and AutoQL
Customer-Level Security – JWT-based authentication ensuring customer data isolation
User-Level Security – Unique Customer ID with role-based (RBAC) /ACL-based access control
Database-Level Security – Defence in depth protecting data at the storage layer

Security is a top priority at Chata.ai. We take several measures to help ensure every implementation of AutoQL is secure and meets the highest standards of data protection.

AutoQL Security Architecture is built on four foundational layers:

Integrator Partner Security & Network Connectivity – Secure communication protocols between partner systems and AutoQL.
Customer-Level Security – JSON Web Token (JWT)-based authentication ensuring customer data isolation, so each customer's data stays fully separated from every other's.
User-Level Security – Unique Customer ID with role-based access control (RBAC) or access control list (ACL)-based access control, restricting exactly what each user can see and do.
Database-Level Security – Defence in depth protecting data at the storage layer, so a breach at one layer doesn't expose the rest.

Compliance, Certifications & Controls

Core Security Commitments

Product Details & Security Features

Learn more about the Security Architecture

Tech background with blue and purple accents

See How It Works With Your Data

Book a 20-minute call with our technical team. We'll map Chata.ai's security architecture to your specific tech stack, deployment requirements, and access control setup.

Book a Walkthrough

Request Security Documentation