BigQuery cost control for the whole organization
For BigQuery estates above $50k a month. Every project and region in one account, unlimited seats, and the security, governance and support a platform team needs.
- Days of job history
- 0
- Rows of your table data we read
- 0
- Seats
- Unlimited
- Scan schedule
- Hourly
- Cognis AI usage
- > 5x
Read-only, metadata-only, audited end to end
Your table data never leaves your warehouse. Every login, role change and AI action is logged, and you decide how people sign in.
Metadata only
The scanner service account never asks for the role that reads your table contents. The access model keeps the promise, not a policy document.
Tenant isolation
Postgres row-level security fences off each account's records, as a second check behind the application code.
Full org audit log
Logins, role changes, API keys, exports, approvals and AI actions — who did what, and when.
Encrypted credentials
Service-account keys, AI DBA operator keys and dbt Cloud tokens are encrypted with AES-256-GCM and never sent back to the browser.
Login policy
Limit how many devices each person can sign in on, down to one, and sign people out after a set idle time.
DPA and security reviews
A Data Processing Addendum and help with your security questionnaire. SOC 2 Type II is in progress, not yet certified.
AI fixes only inside the policy you set
Roles gate access, the AI DBA starts off, and every change is logged and almost all can be rolled back.
Unlimited seats, two roles
Owners change settings, viewers read. A teammate who signs up with your email domain waits until an owner lets them in.
AI DBA starts off
Cognis AI DBA starts paused, with its mode set to off. It does nothing until an owner turns it on and sets the policy.
Approval above your limit
Any fix worth more than your dollar limit, or past your daily and monthly caps, waits for an owner to approve it.
Freeze windows
Pick days and hours, like month-end close, when the AI DBA makes no changes at all.
Checked and reversible
Each warehouse change is verified after it lands, and almost all roll back in one click. Code fixes arrive as pull requests that a person merges.
AI usage sized to you
A custom AI allowance for Cognis chat, the query optimizer and the AI DBA, with up to 20 open fix PRs across 25 repos.
Built for multi-project, multi-region estates
One account for every project, hourly scans, our longest history window, and spend split by team.
Every project and region
All your BigQuery projects in one account. We find the regions you use at the start of each scan.
Hourly, or your schedule
Scans run every hour, or on a schedule we set up with you. Anomaly checks follow the same schedule.
90 days of history
Each scan looks back over 90 days of jobs, our longest window, and the charts go back just as far.
Cost centers
Rules map projects, datasets and labels to teams, so every dollar has an owner.
REST API
Up to 10 read-only API keys with no daily call cap. Pull spend, findings and storage into your own tools.
Report emails
An Excel report by email, daily, weekly or monthly. Owners pick which parts each person gets.
A team that answers, not a ticket queue
Enterprise comes with a shared Slack channel, a named account manager, a response-time SLA, and custom contract terms and invoicing.
Shared Slack channel
A Slack channel with your team and a named account manager who knows your setup.
Support SLA
A response time written into your contract, not a best-effort queue.
Quarterly business review
A regular review of the savings you made and what to fix next, with a written report.
Security reviews go faster when the answer is simple: we can't read your data, by design.
- DPA available
- SOC 2 Type II in progress
- Custom MSA and invoicing
Let's scope your rollout
See SlashPeak on a warehouse like yours, and get straight answers on security, governance and pricing.
- Read-only access
- Metadata only
- Named account manager
- Custom contract