Docs / Security & Safety

Security & Safety

Local execution

Lakecode runs entirely on your machine. It connects to Databricks or Snowflake using your existing CLI profile and credentials. Your tokens never leave your machine — they are used locally to make API calls directly to your workspace.

Permissions

Lakecode respects your platform's permission model — Unity Catalog for Databricks, RBAC for Snowflake. If your account cannot access a catalog, schema, or table, neither can Lakecode. There is no privilege escalation.

Plan mode

For complex or potentially risky operations, Lakecode enters plan mode. Before executing, it shows you exactly what it intends to do and asks for confirmation. This prevents accidental modifications to production resources.

Guardrails

Built-in guardrails prevent common mistakes: dropping tables without confirmation, running unbounded queries, or deploying to production paths without explicit intent. These guardrails are always active and cannot be disabled.

Proxy security

  • License keys are Ed25519 signed and verified server-side on every request
  • The proxy does not log request or response content — only metadata (user ID, token counts, timestamps) for billing
  • Payments are handled by Stripe (PCI DSS compliant) — Lakecode never sees your card number
  • Revoked keys are checked against a KV store on every request for instant invalidation