Read-only, inside your account, and nothing more.
FactorPrism is a Snowflake Native App. It runs inside your Snowflake account, on your warehouse, under your roles, with the least access it can have.
Your data never leaves Snowflake
All analysis runs inside your account. Data is never copied out, sent to an outside service, or sent to us.
Read-only on one object
The app can select from the table or view you choose. It cannot change, delete or export it.
Never used for training
Your data is not used to train any model, ours or anyone else's.
Every permission the app requests
Required
| Permission | Why |
|---|---|
SELECT on one table or view (Source Data Table or Source Data View) | To read the data you ask about. Scoped to the object you pick; revoke it any time. |
ERRORS_AND_WARNINGS event sharing | So errors can be diagnosed. Events never include source rows, column names, values, factor labels, SQL or notes. |
Optional, only for the feature that needs it
| Permission | What it enables |
|---|---|
CORTEX_USER database role | Snowflake Cortex writes a plain-language interpretation of each Finding. Cortex runs inside Snowflake's security boundary. Every number is computed without it. |
CREATE DATABASE | Keeps saved Findings in a database your account owns. Without it they are stored in the app's own schema, which is the default. |
EXECUTE TASK and USAGE on one existing warehouse | Scheduled checks that the app starts itself. FactorPrism cannot create, resize or suspend the warehouse. Your administrator can instead run reviewed SQL with no task permission granted to the app. |
USAGE_LOGS event sharing | Data-free product usage events, in fixed categories. |
What FactorPrism never asks for
- No permission to write to, change or delete your business data
- No account administration or grant management
- No way to move or export data out of your Snowflake account
- No sharing of your data with any third party
You stay in control
Every permission is granted, and can be revoked, through Snowflake's standard Privileges and References screens for the app. Your account's network policies, authentication, role hierarchy and access controls govern the app exactly as they govern everything else.
Security reviews
We are glad to support your review. For questions, documentation or vendor-assessment paperwork, email info@factorprism.com. See also the privacy policy and the administrator checklist.