Back to Boreon

Privacy Policy

Last updated: 2026-08-15

This Privacy Policy explains how Boreon Industries LLC ("Boreon", "we", "us") processes personal data when you use TabTotal, our hosted Tableau governance service. Boreon Industries LLC is a limited liability company formed in the State of Georgia, United States. The software itself runs inside your own cloud environment, so your data stays with you. This policy is written for United States customers first, and to meet Swiss and EU expectations as well.

Who we are

TabTotal is operated by Boreon Industries LLC, a limited liability company formed in the State of Georgia, United States. Boreon Industries LLC is the company you contract with. For any privacy question, or to exercise the rights described below, contact us at privacy@boreon.com.

What data we process

  • Account data. The email address you sign in with, and the password and multi-factor settings needed to authenticate you.
  • Tableau connection credentials. When you connect TabTotal to your Tableau site, the Personal Access Token (PAT) or session you provide is held server-side only for the lifetime of your working session. It is never written to the browser and is never persisted to long-term storage.
  • Security data. Your multi-factor (TOTP) secret is stored encrypted at rest; passwords are stored only as salted, key-derived hashes.
  • Operational logs. Minimal technical logs needed to run the service securely. We do not log your password, your PAT, or your MFA secret.

We do not sell your personal data, we do not use it for advertising, and we do not use it to train any machine-learning model, ours or anyone else's.

Artificial intelligence: bring your own, or none at all

There is no artificial intelligence inside the Boreon platform. Every workbook we generate, every validation, every lineage graph and every governance check is produced by deterministic engines: ordinary, repeatable code that gives the same answer for the same input, every time. Nothing about the product requires a model to function.

AI features are off by default. They become available only when your own organisation supplies its own Anthropic or OpenAI API key, entered by you for a session or configured once by your own administrator. Boreon does not supply a key, does not resell model access, and runs no model on your behalf without one.

When you do enable an AI feature, we want you to know exactly what that means for your data:

  • Your prompt, and the estate context needed to answer it (such as names of projects, workbooks, fields and metrics), are sent directly to the AI provider you chose, under your own account with that provider, governed by their terms.
  • Boreon does not train on your prompts, your answers, your Tableau content or your data, and does not share them with any third party other than the provider you selected.
  • Assistant conversations are stored encrypted and scoped to your own user. Administrators see usage and cost metadata, not the content of conversations.
  • Your API key is held server-side only and is never written to the browser.
  • AI never writes to your Tableau estate. It can read, explain and propose; every change is performed by a person through that tool's own approval gate.

What our assistants will and will not say, and how a disclosure of self-harm is handled, is set out in our AI Safety and Content Standards.

Why we process it (lawful bases)

We process the data above to provide the service you have asked for (performance of a contract), to keep the service and your account secure (our legitimate interests and our legal obligations), and, where applicable, on the basis of your consent. Where Swiss or EU law applies, those are the lawful bases we rely on, and where consent is the basis you may withdraw it at any time. United States privacy laws are not built on lawful bases; the rights they give you are set out below.

Your rights

Subject to applicable law, you may request access to, correction of, deletion of, or portability of your personal data, and you may object to or restrict certain processing. We honour these requests for every customer, wherever you are, rather than only where a statute compels us.

United States

If you are a resident of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, or another state with a comprehensive consumer privacy law, that law gives you the right to know what personal information we collect, to obtain a copy of it, to correct or delete it, and not to be discriminated against for exercising those rights. Under the California Consumer Privacy Act (CCPA), as amended by the CPRA, you also have the right to know whether we sell or share personal information: we do not sell or share your personal information, as those terms are defined under California law, and we do not process it for targeted advertising or profiling. We do not use or disclose sensitive personal information for any purpose beyond providing the service you asked for.

Switzerland and the EEA

The same rights are recognised under the Swiss Federal Act on Data Protection (revFADP / nFADP) and, where it applies, the EU General Data Protection Regulation (GDPR). We honour them wherever you run Boreon.

Where your data is hosted

Boreon runs inside your own cloud environment, and your data stays there. The software is deployed into infrastructure your organisation already operates, in the region you already chose, under your own administrators. Your account data, your encrypted security data and everything Boreon reads from your Tableau estate remain inside that environment. This is true of a trial exactly as it is of a paid deployment.

Boreon Industries LLC does not receive or store your data. We are a United States company; we are not a host of your content, and there is no copy of it on our side to disclose, subpoena or lose.

One exception exists and only if you ask for it: if you would rather not run the software yourself, we can host it for you on dedicated infrastructure in Geneva, Switzerland, behind a web application firewall. That is an option you choose deliberately, never the default, and it is the only arrangement under which your data sits on infrastructure we operate.

Retention

We keep account and security data for as long as your account is active, and then for only as long as needed to meet our legal obligations. Tableau connection credentials are retained only for the duration of your working session and are discarded when the session ends.

How we protect your data

  • Passwords are stored as scrypt-derived hashes, never in plain text.
  • Multi-factor (MFA) secrets are encrypted at rest (Fernet) and MFA is required on managed accounts.
  • Traffic is protected in transit with TLS.

International transfers

Your account data and encrypted security data stay in your own cloud environment. One transfer can occur, and only if you choose it: when your organisation enables an AI feature with its own API key, the prompt and the estate context needed to answer it go directly to the AI provider you selected, which may process them in another country, under your own agreement with that provider. Where such a transfer involves personal data, it is made on the basis of recognised safeguards such as the European Commission's Standard Contractual Clauses and the corresponding Swiss addendum. If you do not enable an AI feature, no such transfer takes place.

Automated decision-making

We do not make decisions about you that produce legal or similarly significant effects by automated means, and we do not profile you. Our engines analyse your Tableau estate, not the people using it.

Children

TabTotal is a workplace product for business use and is not directed at children. Accounts are created by an organisation's own administrators. We do not knowingly collect personal data from anyone under 16; if you believe we have, contact privacy@boreon.com and we will delete it.

Complaints

If you are not satisfied with how we handle your personal data, please tell us first and we will try to put it right. You also have the right to lodge a complaint with a supervisory authority: in the United States, the attorney general of your state; in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); in the EEA, the authority in your country of residence or workplace.

Cookies

TabTotal uses only strictly-necessary cookies: a session cookie and a multi-factor cookie that keep you signed in during a working session. We do not use tracking, advertising, or analytics cookies.

Contact

Privacy enquiries: privacy@boreon.com. General legal enquiries: legal@boreon.com.

Back to Boreon