Your data stays where it is.
Northstar queries your warehouse in place. AI features are optional, act within your rights, and you can see what each one sends.
Queries run where the data is
Datasets are queried in your warehouse. Ingestion pipelines load data into the warehouse you choose. Document collections keep an index of the PDF text so that Chat can search them.
AI works within your rights
An assistant only reads what you can read. Chat only uses datasets where your team has the Ask AI right, and the queries it writes are checked table by table.
Credentials stay out of sight
The ingestion agent asks for credentials through a form outside the conversation. Values are encrypted as soon as you send them. API keys are shown once, and only a fingerprint is kept.
Generated code runs in a sandbox
Each ingestion run gets a throwaway container, an unprivileged user and an empty environment. It cannot reach the platform database, and its logs are masked.
What each AI feature sends
AI features call a language model configured for your platform. What each one sends:
| Feature | Sent to the model |
|---|---|
| Chat | Your question, the schemas of the datasets it uses, the results of its queries, and document excerpts |
| Quality summary | Aggregated statistics only, never raw rows |
| Column descriptions | Documentation, column lineage and a sample of rows |
| Transformation agent | Schemas and a sample of rows of the input datasets |
| Ingestion agent | Your messages and the documentation it reads. Never the credentials. |
| SQL Executor summary | The first rows of the page shown, only when you ask |
| Dashboard summary | The snapshot of the data displayed |
| Smart Cockpit | KPI values and trends |
If a dataset holds data that must not leave your warehouse, ask your administrators which AI features to keep on.
Turn AI features on or off
Platform administrators turn each AI feature on or off in Platform settings → AI features. A change applies to every organization within a few seconds.
The switches are: Smart Cockpit, Chat, Data quality summary, Dashboard summary, Dashboard assistant, SQL Executor assistant, Alert and KPI SQL assistants, Alert assistant, Builder assistant, Metadata and recommendations, Ingestion agent and Transformation agent.
When a feature is off, it is no longer offered; the rest of Northstar works as before.
Report a vulnerability
Report security issues privately through a GitHub security advisory. Do not open a public issue for an exploitable problem.
Open an advisory