Your database stays yours.
Internite AI is built with security-first architecture. We treat your database credentials like nuclear launch codes.
Security Architecture
Every security feature is implemented with production-grade engineering, not marketing claims.
Encrypted Credentials
implementedAll database credentials are encrypted using AES-256-GCM before storage. Encryption keys are managed server-side and never exposed to the browser.
- AES-256-GCM encryption
- HSM key management
- Encrypted in transit and at rest
Browser-Safe Architecture
implementedDatabase passwords and connection strings are never sent to the frontend. All query execution happens server-side with no credential exposure.
- Zero credential exposure
- Server-side only execution
- No proxying credentials
Read-Only by Default
implementedThe AI query engine blocks DROP, DELETE, UPDATE, INSERT, TRUNCATE, ALTER, GRANT, and other destructive operations before execution.
- SQL injection prevention
- Whitelist validation
- Admin opt-in for writes
Tenant Isolation
implementedEvery database, query, conversation, and schema is scoped to your organization. Cross-tenant access is architecturally impossible.
- Organization-level scoping
- Database-level permissions
- Query isolation
Role-Based Access
implementedDefine custom roles with specific permissions. Control who can connect databases, run queries, or manage settings.
- Custom role definitions
- Permission granularity
- Team management
API Key Security
implementedAPI keys are hashed before storage, support IP allowlisting, and can be rotated without downtime.
- SHA-256 hashing
- IP restrictions
- Instant rotation
Audit Logging
implementedEvery query, user action, and system event is logged with full context for compliance and debugging.
- Query logging
- User attribution
- Export capabilities
Webhook Verification
implementedAll incoming webhooks are verified using HMAC signatures. Invalid payloads are rejected automatically.
- HMAC-SHA256 verification
- Timestamp validation
- Replay attack prevention
Compliance & Certifications
We are transparent about our security posture. Green means implemented. Yellow means planned.
| Security Feature | Status |
|---|---|
| Encryption at rest | Implemented |
| Encryption in transit | Implemented |
| Multi-tenant isolation | Implemented |
| Audit logging | Implemented |
| API key management | Implemented |
| SOC 2 Type II | Planned |
| GDPR compliance tools | Implemented |
| HIPAA eligibility | Planned |
Note: We do not claim certifications we have not obtained. SOC 2 Type II and HIPAA eligibility are planned but not yet certified.
Security Architecture
Your Browser
HTTPS encrypted connection
Internite Server
Query validation & execution
Your Database
Credentials never exposed