Your data stays yours.
We just make it useful.

Enterprise-grade security at every layer : encryption, access control, audit trails, and flexible deployment options to match your security posture.

Book a demo
SECURITY & COMPLIANCE
Security at a Glance

Encryption

TLS 1.2+ in transit. AES-256 at rest. Connector credentials encrypted with Fernet (AES-128-CBC + HMAC-SHA256).

Secrets stored as environment variables, never in code.

Audit Trail

30+ event types logged: authentication, data access, dashboard views, AI conversations, predictions, connector changes.

Full traceability per organization.

GDPR Compliant

Data minimization, purpose limitation, right to erasure. SOC2-ready architecture.

Secure CI/CD pipeline with automated scanning (SAST, Trivy, secret detection, SBOM generation).

Access Control

RBAC with Admin and User roles. MFA via TOTP, configurable per organization. JWT sessions with 6-hour expiry.

Automatic invalidation on role or password change.

THREE DEPLOYMENT OPTIONS

Deploy Your Way

Same Matr platform. Same features. Three deployment options — choose the one that fits your security posture.

01

Managed

  • Hosted on GCP (EU region).
  • Managed by Matr.
  • Automatic updates, monitoring, and scaling.
  • Zero infrastructure for you.
02

On-Premise

  • Deploy on your cloud or your servers.
  • Full Docker containerization.
  • Non-root execution.
  • Resource limits configured.
Your data, your rules.
03

Sovereign

  • Mistral + Scaleway.
  • AI and infrastructure 100% European.
  • No data leaves the EU.
  • No US hyperscaler dependency.
The three aren't alternatives.
Most Matr customers run two or three at once, on the same data, with the same governance.

Compliance & Governance

01
Data isolation

Multi-tenant architecture with strict organization-level isolation. Every API request verifies user-organization membership.Datasets, connectors, and dashboards isolated by organization ID.

02
No data storage

By default, Matr queries your warehouse directly and doesn't store your business data. Only metadata (schema, definitions, model parameters) is stored.Optional caching available for performance.

03
Granular permissions

Role-based access control on every resource. Admins define who can connect data, build models, or query results. Permissions enforced at the API level, down to individual datasets and dashboards.

Questions we hear most.

Every month you spend building ML in-house is a month your competitors spend shipping predictions.

  • Do I need a data scientist to use Matr?

    No. That's the whole point. Your data analyst describes the business question in natural language — Matr handles the ML pipeline.

  • What types of models can I build?

    Classification (churn, scoring, segmentation), regression (revenue forecast, demand planning), and time-series forecasting. Matr selects the best approach based on your data.

  • How accurate are the models?

    It depends on your data quality, but Matr shows you accuracy metrics, baseline comparison, and confidence scores so you can make an informed decision. Typical results: 75-95% accuracy on well-structured data.

  • Where does my data stay?

    In your warehouse. Matr connects to your Snowflake, BigQuery, or PostgreSQL. No data is moved or duplicated.

  • Can I integrate predictions into my existing tools?

    Yes. Via REST API, direct warehouse write-back, or scheduled exports. Predictions flow into your CRM, ERP, spreadsheet — wherever your team works.

  • What happens if the model's performance degrades?

    Matr monitors model drift continuously. When performance drops below threshold, it flags the issue and can trigger automatic retraining.

For more questions, feel free to contact us

Contact us