Security and Compliance
Learn about BEEM's security architecture including authentication, role-based access control, workspace isolation, audit trails, and compliance with SOC2, PIPEDA, and GDPR standards.
BEEM is built with security at every layer. Your data stays in a dedicated cloud environment with enterprise-grade access controls.
Understand Authentication
- BEEM uses AWS Cognito user pools for identity management
- Log in with your email-based username
- Password policy requires 8+ characters minimum
- SSO support is available for enterprise single sign-on
- Sessions are managed automatically with expiry handling
Set Up Role-Based Access
- Go to Members in the left sidebar
- Assign each user the appropriate role:
- Organization Admin: Full access, manages members and settings
- Editor: Creates and edits content, no admin access
- Viewer: Read-only access to dashboards and AI Insights
- Roles are assigned per workspace, providing fine-grained control
Configure Workspace Isolation
- Create separate workspaces for different teams or projects
- Users only see data in workspaces they are invited to
- Share datasets across workspaces on a read-only basis (results only, SQL is hidden)
Review Your Audit Trail
- Open Monitor in the left sidebar
- Filter events by date, object type, and status
- Review who did what and when for compliance reporting
Compliance Standards
| Standard | Status |
|---|---|
| SOC2 | Processes in place |
| PIPEDA | Compliant |
| GDPR | Compliant |
Data Residency
- All data is hosted on AWS ca-central-1 (Canada)
- Each client has a dedicated cloud environment
- Data never leaves your infrastructure when using AI Insights
Authorization Summary
- Organization-level user management
- Workspace-level member management with RBAC
- Dataset sharing controls: Share results without exposing underlying SQL
- Connection management: Organization Admin only
Updated 4 days ago