Frontier
Sign in

Security model

Last updated 6 September 2026

Trust boundary

Warehouse credentials and warehouse rows never leave the customer environment. The ingest API rejects payloads that look like raw rows or credential fields. SaaS stores assessment aggregates, hashed entity identifiers when configured, account data, and versioned semantic manifests.

  • API keys are stored in the OS keychain, or a user-owned 0600 file if the keychain is unavailable.
  • Keys are never written to frontier.yml, dbt_project.yml, profiles.yml, Git, or generated workflows.
  • Entity hash keys stay in GitHub secrets and are not sent to SaaS. Rotating the hash key changes entity fingerprints.
  • GitHub comments never include entity IDs or warehouse values.