Security & Governance

Security and governance that match enterprise operating reality

DataSafeHouse is built around enforceable controls, explicit permissions, and auditable operations instead of after-the-fact governance overlays.

Governance controls

Scoped administrative access

Admin keys support read/write/security scopes and optional tenant/app restrictions, aligning privileges with job responsibilities.

Role-based console operations

Viewer, operator, and admin roles gate platform actions such as policy updates, key management, connector operations, and model changes.

Policy inheritance and enforcement

Tenant and app policy layers resolve into effective request-time controls for providers, models, and request token limits.

Layered rate and spend controls

System, tenant, app, and API key limit policies govern request rates, token throughput, daily token ceilings, and monthly spend thresholds.

Audit and event telemetry

Admin authentication events, policy-change events, usage events, and connector action logs support governance and incident review processes.

Reliability controls

Connector network guardrails

Host allowlists and egress validation are available for connector traffic, including protections against blocked internal or metadata endpoints in SaaS mode.

Request observability

Usage summaries and event streams capture request IDs, status codes, latency, token usage, and provider/model routing details.

Operational error handling

Console clients and gateway services include structured error reporting and safe logging patterns with sensitive value masking.