Enforce data governance policies through API‑level access controls. Role‑based permissions, audit logging, and rate limiting on every query — across every data source in your organization.
API-layer data governance enforces access policy at the point where applications and AI actually touch data, instead of separately inside every database. DreamFactory applies centralized, role-based policies — including field-level masking and redaction, rate limits, and quotas — across SQL, NoSQL, file stores, and SaaS APIs from a single control point.
Every query is logged with user identity, timestamp, and response details, and because the platform is self-hosted, governance enforcement and audit logs stay inside your environment.
Why DreamFactory
Centralized Policy
Define access policies once and apply them across every database, API, and downstream consumer.
Field‑Level Security
Mask, redact, or block specific columns based on user role — no app code changes required.
Full Audit Trail
Every API call is logged with user identity, timestamp, query, and response for compliance teams.
Rate Limiting
Per‑user, per‑role, and per‑endpoint quotas prevent abuse and ensure fair resource usage.
Multi‑Source
Apply consistent governance across SQL, NoSQL, file stores, and SaaS APIs from a single control plane.
Self‑Hosted
Run inside your network — governance enforcement and audit logs never leave your environment.
How is this different from database-level permissions?
Database permissions are configured separately per system; API-layer governance defines policy once and applies it consistently across every connected data source — SQL, NoSQL, file stores, and SaaS APIs.
Can we mask or block specific fields?
Yes. Field-level security lets you mask, redact, or block specific columns based on user role, with no application code changes required.
How does rate limiting work?
Quotas can be set per user, per role, and per endpoint, preventing abuse and ensuring fair resource use across consumers.
Where do the audit logs live?
Inside your environment. DreamFactory is self-hosted, so enforcement and audit logging run in your network and records never leave your control.
Free 30-Minute Demo
Get a Demo From One of Our Engineers
Give us 30 minutes to amaze you. You won't be disappointed!
