Security & compliance
A short overview for security, legal, and procurement reviewers. It explains how Embedded Canvas protects customer data without prescribing implementation details for your engineering team.
Roles
| Party | Responsibility |
|---|---|
| Your company | Owns the customer relationship and warehouse data |
| Embedded Canvas | Provides the embed infrastructure that delivers tenant-scoped analytics in your product |
| Your end users | Sign in only through your application for customer embeds — they do not create Embedded Canvas accounts. (Your own Viewers and Explorers are workspace staff who sign in to Embedded Canvas and open dashboards in the Portal.) |
How access is controlled
- Every production embed is limited to one tenant at a time. That tenant is chosen by your backend when the session is created.
- End users cannot open another customer’s data by changing URLs or tokens in the browser.
- Long-lived credentials that talk to Embedded Canvas stay on your servers. Browsers receive only short-lived access for a single viewing session.
What we process vs what we don’t
- We process: embed configuration, session delivery, and the infrastructure needed to show your published dashboards.
- We do not copy your warehouse mart into our control-plane database as a secondary data store. Charts query your warehouse under the tenant scope you define.
What your team reviews before go-live
- Sessions are minted only from a trusted backend path (never from secrets in the browser).
- Each parent application origin you embed from is allowlisted in the Operator console.
- Cross-tenant checks in QA fail the way you expect (tenant A never sees tenant B).
- Warehouse credentials granted to the platform use least privilege.
Engineering how-tos for mounts and sessions are in Quickstart and the Hello World tutorials. This page is the non-technical summary.
Trust & procurement
| Resource | Purpose |
|---|---|
| Status | Service status |
| Usage | Embed view metering and capacity (signed-in console) |
| Sales / security questionnaire | DPA packages, enterprise SLAs, and custom connectivity |
Contact sales when you need a written security packet (PDF), subprocessors list, or an enterprise agreement.