Upsolve icon

Upsolve

Upsolve is an AI analytics platform with server-side row-level security for data agents. It helps teams deploy governed, multi-tenant analytics by applying user- and organization-based filters before queries reach the database.

Upsolve

Server-side access control for AI data agents

Upsolve is an AI analytics platform that provides server-side row-level security for data agents. It applies access rules before a query runs, so an agent can answer questions from governed warehouse data without receiving the rules themselves or relying on a prompt to enforce tenant boundaries.

Teams define organization and user properties, such as tenant, country, or role, and use them in global or custom SQL rules. Upsolve can test queries as different users and show the resulting WHERE clause. The feature is intended for multi-tenant deployments where one agent must serve multiple customers while each viewer sees only permitted rows.

Row-level security capabilities

Server-side pre-filters

Every query written by an AI agent or a person is filtered on the server before it reaches the database.

Invisible to the agent

Rules remain outside the agent's context, separating deterministic access control from prompt-driven behavior.

Property-based rules

Register organizations and users with properties such as tenant, country, or role, then apply those properties across relevant tables.

Global and custom SQL rules

Use reusable global rules for matching fields and custom SQL rules when access logic requires a more complex relationship.

User-level testing

Preview any query as any user and inspect the exact WHERE clause Upsolve will apply before execution.

Configurable enforcement

Choose whether a missing user property skips a rule or blocks the data, and use the same agent across multiple tenants.

Practical use cases

  • Multi-tenant customer analytics

    Deploy one analytics agent for multiple customer organizations while using tenant properties to ensure each customer receives only its own rows.

  • Permission-aware shared dashboards

    Give account managers or internal teams shared canvases whose live views re-run under each viewer's permissions instead of exposing the creator's full result set.

  • Production AI analytics

    Let users ask natural-language questions over governed warehouse data while keeping access enforcement independent of the agent's prompt and reasoning.

  • Access-control testing

    Validate security behavior during implementation or review by impersonating different users and checking the exact SQL predicate applied to a query.

Pros and Cons

Pros

  • Rules are enforced before queries reach the database, rather than being delegated to the agent's instructions.
  • The agent does not see the rules, reducing the opportunity for prompt-level behavior to bypass them.
  • Rules can be tested as different users with the resulting SQL filter visible for review.
  • The feature supports shared views and multi-tenant deployments using one agent across customers.

Cons

  • The feature depends on correctly registering user and organization properties and writing accurate rules; the source does not describe automated rule generation.
  • Row-level security is listed on Team and Enterprise plans rather than Free or Pro.
  • The documented scope focuses on row filtering; other access-control requirements may need separate configuration.

FAQ

Can an AI agent bypass Upsolve's row-level-security rules?

No. Upsolve applies row-level-security rules server side as pre-filters on every query before it runs, and the agent does not receive the rules in its context.

How is row-level security configured and tested?

Register organizations and users with properties such as country, tenant, or role, then write global rules or custom SQL rules. You can preview a query as any user and inspect the WHERE clause applied before execution.

Does row-level security apply to shared dashboards or canvases?

Yes. Live views on shared canvases are re-run under the viewer's own permissions, so the displayed data follows that user's access rules.

Can rules use custom SQL or more complex table relationships?

Upsolve supports global rules such as matching a table's country column to the user's country property. For relationships that require a join or other more complex logic, you can write a custom SQL rule for the table.

Which Upsolve plans include row-level security?

The feature is listed on the Team and Enterprise plans. The Team plan also includes embedding, multi-tenant support, and an AI data-modeling and semantic-layer workflow; Enterprise adds deployment and identity options such as on-premises, self-hosted, VPC, and SAML SSO.

Quick Facts

Product
Upsolve
Category
AI analytics and data-agent platform
Primary workflow
Apply server-side row filters before agent or user queries execute
Typical fit
Multi-tenant analytics applications and governed shared data views
Plan availability
Team and Enterprise plans
Deployment context
Cloud hosted across plans; Enterprise also offers on-premises, self-hosted, and VPC deployment