Data Desk

Data Desk Architecture of Data Desk, showing its components and how they connect. QA Engineer · browser · Architecture component QA Engineer browser Gemini API · names only, never rows · Self-hosted (Docker) · opt-in Gemini API names only, never rows opt-in Data Desk · Streamlit, 8 tools · Self-hosted (Docker) Data Desk Streamlit, 8 tools Accounts & Masking · admin approval, role-based · Self-hosted (Docker) Accounts & Masking admin approval, role-based Statement Guard · rejects every non-read · Self-hosted (Docker) › Read-only enforcement Statement Guard rejects every non-read Scheduled Runner · headless, cron · Self-hosted (Docker) Scheduled Runner headless, cron Read-only DB user · second, independent layer · Self-hosted (Docker) › Read-only enforcement Read-only DB user second, independent layer Target MySQL · the database under test · Architecture component Target MySQL the database under test uses approve + mask column names every query scheduled checks read-only user SELECT only Self-hosted (Docker) Read-only enforcement Legend Frontend Backend Database Security External