Queries can never write
Every EQQ query is read-only by design. No query - whether run by a first-day user or a power user - can change, move, or delete a record in your database. There is no write path to misuse, so your production data is safe from the tool itself, not just from its users.
Your data never leaves your premises
EQQ installs inside your firewall, on your own server, next to your own database. It is not a cloud service: no copy of your data is uploaded, synchronized, or cached outside your network. What your security team controls today, it keeps controlling. Your IT Support can lift this restriction for external organizations or individuals who are intended recipients of some queries’ outputs.
Built on the permissions you already have
EQQ reads through your database’s own security model - the same accounts, roles, and views your DBA already manages. Users see what you decide they see. Adding EQQ does not create a parallel permission system to configure, audit, or worry about.
Is EQQ-Triangle safe to put next to a production database?
Yes, because of how it is built. EQQ-Triangle is read-only, it is installed on your own network, and it works through the database permissions you already manage. Here is what each of those means in practice.
What does read-only mean?
Every query can look at your data and nothing else. There is no way to insert, change or delete a record, so a mistake in a query cannot damage production data.
Who can see what?
Users see what your database permissions allow. Your DBA keeps managing the same accounts, roles and views. EQQ-Triangle adds sign-in with multi-factor authentication and role-based access, and does not add a second permission system to audit.
What stays on your network?
All of it. The web application runs on your own server, inside your firewall, and connects over HTTPS/TLS. No copy of your data is uploaded or synchronized to a cloud service.
If someone outside your organization needs the output of a query, your IT Support can lift the on-premises restriction for that case. For the full picture of how it fits your systems, see EQQ-Triangle database and operating system independence, or read what the EQQ-Triangle is.
Security questions buyers ask
Can EQQ-Triangle change or delete our data?
No. Queries are read-only by design, so there is no write path to misuse.
Does our data leave our premises?
No. EQQ-Triangle is installed inside your firewall next to your own database. It is not a cloud service.
Do we need to set up a new permission system?
No. EQQ-Triangle reads through your database's existing accounts, roles and views, so your DBA stays in control.
Which databases does it work with?
PostgreSQL, MySQL and MS SQL. You can start a free two-month trial without a credit card, or contact us to walk your security staff through the architecture.