Security
What Logit can see, where queries run, and what we never do with your data.
When you connect a source, Logit reads your schema: table names, column names, and types. It reads rows only to answer a question you asked, and only through the read-only user you created.
To write SQL, Logit sends your question and the relevant parts of your schema to our model provider. Our contract with them bars training on it, and they’re on our subprocessor list.
Schema: always, so it understands your data
Rows: only while answering, only what the query returns
Questions and saved answers: stored in your workspace
Queries run inside your warehouse, not on a copy of it. Logit sends the query, your warehouse runs it, and only the result comes back.
On Enterprise, we can deploy Logit in your own cloud account, so queries and results don’t pass through our servers.
We never write to your data sources.
We never train models on your data or your questions.
We never sell your data or use it for advertising.
We don’t copy your tables. Saved answers stay in your workspace.
Encrypted in transit with TLS 1.2 or higher
Encrypted at rest with AES-256
Role-based access inside every workspace
SSO and SCIM on Enterprise
An audit log of every query on Enterprise
You choose how long query history is kept. When you delete a workspace, we delete its questions, answers, and connection settings within 30 days. Copies in backups are removed as those backups expire.
We use a small number of vendors to run Logit, such as cloud hosting, our model provider, and email delivery. The current list is part of our security package.
Found something? Email security@logithq.com. We’ll confirm we received it within two business days and tell you what we find.