Security and Trust

xFalcon connects to Snowflake, BigQuery, Databricks, Redshift, Postgres, SQL Server and Oracle with read-only access. It also supports CSV and Excel upload at gigabyte scale. Your data team chooses which tables it can query.

Iseyon holds no replica of your warehouse. Questions run against live data, with source details available for review.

The platform keeps schema metadata, definitions, memories, annotations, query history and audit events. Files you upload are also stored.

• Your warehouse remains the system of record. Connections are read-only and row-limited.
• Iseyon holds no replica of your warehouse.
• The hosted platform runs on AWS as a single-tenant deployment, encrypted in transit and at rest, across multiple availability zones, with zero-downtime deploys.
• If hosted infrastructure is not acceptable, a signed installer runs the full platform inside your own environment - your cloud account or your own datacentre - including fully offline and air-gapped deployments.

• Single sign-on over OIDC, including Okta and Azure AD.
• Per-tool permissions, with approvals and denials recorded.
• Row-level security protects xFalcon's own database. It does not filter your warehouse rows per user.
• Your data team registers the tables xFalcon can query.
• Access and queries are recorded in an audit trail.
• Admins manage users, data sources and shared business rules in one console.

Use your own Anthropic or OpenAI key, or an OpenAI-compatible endpoint, including one you host yourself. Model calls use your provider agreement.

Iseyon-managed access is available if you prefer help managing keys.

• Before a query runs, xFalcon estimates the number of rows it will return.
• It flags empty results, capped results and totals based on partial data.
• Business rules and past corrections guide each query. Earlier versions of definitions stay available.
• Source details and calculations let you check an answer.

Review results before relying on them. See the accuracy disclaimer below.

The hosted platform runs on AWS with encryption, multiple availability zones and zero-downtime deploys. Warehouse connections are read-only and limited to registered tables.

SOC 2 Type II controls are implemented and generating evidence. No SOC 2 report has been issued. Contact us for the current status.

The information, software, documentation, analytics, and outputs provided through xFalcon may contain confidential and proprietary information. Users are responsible for ensuring that only authorized personnel access the platform and any connected or uploaded data.

By accessing and using xFalcon, users acknowledge their obligation to maintain the confidentiality of all proprietary information, datasets, credentials, documentation, and intellectual property made available through the platform. Unauthorized disclosure, reproduction, distribution, or use of confidential information is strictly prohibited and may result in legal action as outlined in applicable agreements, including any executed Non-Disclosure Agreement.

xFalcon provides AI-assisted analytics and decision-support capabilities. While validation, business rules, and quality controls are applied to improve accuracy, xFalcon does not guarantee the completeness, accuracy, or suitability of any output for a particular business, legal, financial, regulatory, or operational purpose. Users remain solely responsible for reviewing, validating, and approving all decisions derived from platform outputs before relying upon them.

To the maximum extent permitted by law, Iseyon Analytics, its affiliates, employees, contractors, and partners shall not be liable for any direct, indirect, incidental, consequential, special, or punitive damages arising from the use of, reliance upon, or inability to use xFalcon, its documentation, analytics, recommendations, or outputs.

Security questionnaires, architecture reviews, and questions about these disclosures: info@xfalcon.ai