A private database workspace with an on-premise agent.
Cloud database tools want your credentials. Compliance does not always agree. Taavik gives you documentation, shared queries, and scheduled exports through an agent that runs inside your network. The cloud receives metadata, not rows.
Why this exists
Some databases cannot be on the public internet.
Internal admin databases, multi-tenant ISV setups, regulated environments, customer-deployed instances. Cloud catalogs and SaaS query tools want a reachable hostname and a credential. That works for many teams. It does not work for these.
No inbound ports
The agent opens TLS outbound to the cloud control plane. No firewall change. Compatible with isolated VPCs and private networks.
Sealed credentials
The browser seals the database password with X25519. The cloud stores the envelope. Only the paired agent can open it, locally.
Read-only enforcement
Three controls: API classifier, read-only database role, provider-side timeout. DML and DDL are rejected before dispatch.
Audit on every action
Scans, queries, scheduled exports. Each event is a row with a timestamp, a user, and the rendered SQL. Compliance teams happy.
Three pillars in one private workspace
Documentation, queries, scheduled exports.
FAQ
Private database workspace with on-premise agent
Where does the cloud control plane run? +
On dedicated virtual machines in the European Union. Backups encrypted at rest, stored in the same region. Subprocessor list at /privacy/subprocessors.
Can I self-host the cloud control plane? +
Not in v1. The cloud is a managed service; the agent is on your network. Enterprise can include a discussion about a dedicated tenant deployment for unique compliance constraints.
Is there a DPA? +
Yes. On request for Pro and included on Enterprise. Standard contractual clauses for cross-border transfers.
What databases are supported? +
PostgreSQL, SQL Server, MySQL, Amazon Redshift in v1. More engines based on customer requests.
Document the database compliance does not let you put on the public internet.
Free for one connection. The agent is small, the first scan is fast, the documentation lands in minutes.