Security

How Doram connects to your data, and how people sign in.

Your data

  • Every connector uses a read-only account. Doram can't write to, change or delete anything in your database.
  • Queries run in your own warehouse. Doram doesn't copy your tables.
  • Credentials are encrypted, kept outside the graph, and never sent to the LLM.
  • Every change and every read is recorded in the audit log.

Sign-in

Go to Settings → Security.

People can sign in with email and password or with Google. Verify your company's domain to show that the workspace belongs to you. You can also set how long people stay signed in before they have to sign in again.

SAML single sign-on and SCIM user provisioning are available on the Enterprise plan. API keys are coming soon.

See also Access rules and Privacy.

On this page