Security at Summarix
Your data is your business. Here's how we protect it.
Read-only database access
User SQL is parsed into an AST and only single SELECT statements are allowed. Queries run inside a read-only transaction that is always rolled back, with a 10-second statement timeout and a 5,000-row cap. We recommend connecting with a read-only database login as well.
SSRF protection
Datasource hosts are resolved once and checked against private, loopback, link-local and cloud-metadata ranges (e.g. 169.254.169.254). We then connect to the verified IP only, preventing DNS-rebinding attacks.
Encrypted credentials
Database passwords are encrypted with AES-256-GCM. API keys are stored only as SHA-256 hashes and shown once on creation.
Safe file processing
Uploads are streamed straight to storage with a hard size limit and parsed with streaming parsers into a fixed-size sample, so large files can't exhaust server memory.
AI safety
Personal information (emails, phone numbers, ID numbers, card numbers) is masked before data reaches the AI. Data is fenced as untrusted content, instruction-like phrases are neutralised, and AI output must match a strict JSON schema.
XSS-safe exports
Every value in exported HTML reports is HTML-escaped, and exports ship with a Content-Security-Policy that blocks scripts. CSV exports are protected against formula injection.
Payments
Card payments are processed by Netcash (PCI-DSS). Payment notifications are verified server-to-server with Netcash before any plan change.
Audit & access control
Role-based workspaces (Owner, Admin, Editor, Viewer) and an audit log of sign-ins, queries, exports, API usage and billing events.