How It Works
Connect, learn, alert.
Trailox reads the access logs your data stores already keep. It never reads table rows or object contents, and nothing sits in the data path. First findings in 48 hours.
Trailox processes over 100 billion S3 requests per month across customers.
Illustrative simulation of access flows, in three steps.
- See: 5 identities reach 7 data stores through 4 operations.
- svc-claims-etl, a service, reads Amazon S3 prefix s3://claims-raw/ and writes Apache Iceberg table on Amazon S3 lake.claims.
- jane.doe, a person signed in through SSO, queries Snowflake table FINANCE.ORDERS and queries Google BigQuery dataset analytics.sessions.
- rag-ingest-agent, an AI agent, reads Databricks table main.ml.features.
- tableau-prod, a BI tool, queries ClickHouse database events and queries Google BigQuery dataset analytics.sessions.
- dbt-nightly, a pipeline, copies out PostgreSQL table orders and writes Snowflake table FINANCE.ORDERS.
- Learn: Trailox learns each identity’s normal paths, and each one is marked normal.
- Alert: the valid key svc-claims-etl reads s3://claims-raw/ from a new IP through a new client, far above its baseline. Trailox raises an illustrative alert, stolen credential suspected, with the next step: disable the key, then use the same record to see what it read.
Three steps
Start with one store. Add the others when you are ready.
Connect
Connect each data store with read-only access. Nothing sits in the data path, and your data is never read.
Learn
Trailox learns how each person, service and AI agent normally reads your data.
Alert
When a valid key or login reads in a new way, Trailox alerts with the evidence, and the same record shows what it read.
Safe to connect
Trailox needs read access to logs and metadata only.
Read-only: no write, delete or admin permission on any data store.
Agentless: nothing is installed on your database servers, endpoints or applications.
Your data is never read.
SOC 2 Type II, audited by Thoropass.
Questions buyers ask
Is Trailox agentless?
Yes. Nothing is installed on your data stores or endpoints.
Does Trailox read our data?
No. It reads access logs and catalog metadata. It never reads table rows or object contents.
Which data stores does Trailox work with?
Object storage, warehouses, lakehouses and databases. The Integrations page has the full, current list.
When do we see first results?
First findings in 48 hours, with a free 14-day Data Access Review.
Start with a free
Data Access Review.
Read-only. First findings in 48 hours.