---
title: "Security — Read-Only by Default, Your Data Stays in Your Database"
description: "How AI for Database protects your data: read-only connections by default, only schema metadata reaches the AI, AES-256 encryption, TLS 1.3, and a self-hosted option."
canonical: "https://www.aifordatabase.com/security/"
---

# Built for security and control

Security



Enterprise-grade security with flexible deployment options. Your data, your control.

## Security features

### Encryption at rest

All data encrypted with AES-256. Credentials never stored in plain text.

### Encryption in transit

TLS 1.3 for all data in transit. End-to-end encryption standard.

### Access control

Granular permissions. Read-only by default. Approve high-risk actions.

### Audit logging

Every query and action logged. Export audit trails for compliance.

### Data isolation

Your data never commingles. Self-hosted keeps everything in your infrastructure.

### Key rotation

Rotate credentials anytime. Automatic key rotation for managed deployments.

## How we handle your data

### Cloud-hosted

Data encrypted in transit and at rest. Queries processed through secure tunnels. No persistent storage of query results unless explicitly enabled.

### Self-hosted

Complete data isolation. Everything runs in your infrastructure. No data leaves your environment. Full control over access and retention.

### AI processing

Schema metadata only sent to AI providers. Query results stay in your environment. Choose free or premium models — you control what's used.

### Data flow diagram

Your Database

Encrypted Tunnel

AI for Database

AI Provider (Optional)

Your Dashboard

Your Actions

## Built for compliance

SOC 2

Enterprise Ready

GDPR

Designed For

HIPAA

Enterprise Available

ISO 27001

Aligned

## Secure by default, from the first query

Start free with read-only access, or talk to us about self-hosted deployment and custom security requirements.

[Start free](https://app.aifordatabase.com/signup)[Talk to our security team](https://www.aifordatabase.com/contact/)[Learn about self-hosted](https://www.aifordatabase.com/self-hosted/)

Free plan available · No credit card required · Start read-only

Source: https://www.aifordatabase.com/security/
