Upsolve AI is the analytics platform for deploying governed, grounded, trustworthy data agents that know your business. Two components: Upsolve Data Agent + Agent Studio. Upsolve Data Agent acts like a best-in-class analyst: asking clarifying questions, optimizing queries, charting data, drawing insights, and creating reports. Agent Context Studio handles governance, semantic layer, context curation, with full testing, observability and evals so your agent answers the what and the why correctly.
This is the 7th launch from Upsolve AI. View more
Upsolve Row-Level Security
Launching today
Row-level security enforced server side, before any query runs. Set rules from user and org properties, test them as any user, and deploy one agent to thousands of tenants. The agent never sees the rules, so it can't bypass them.
Launch Team
Viktor.comAn AI coworker that actually does the work
Promoted
Agree with "if your answer is the prompt, you don't have an answer". We run AI agents for many stores, and keeping one store's customers away from another store's agent is the one thing I would never leave to the model. One question: the rules are on tables and columns. What happens when the agent calls a tool or an API instead of writing SQL, say fetching an order from Shopify? Is that outside what this covers?
@kalingwu Got it, thanks. So it works as long as the API response carries something to filter on, like a shop ID. With Shopify that part is simple since every store has its own access token anyway. Is the dataplane only for the SaaS APIs you support, or can it also sit in front of a team’s own internal APIs?
@kalingwu Makes sense!!
Ka Ling, testing a rule as a particular user before shipping it stood out to me. Much easier to check what a customer will actually see when the permissions are enforced before the query runs. Congrats on the launch!
Hey, congrats on the Upsolve Row-Level Security launch! We're sharing a launch day with Benson: https://www.producthunt.com/products/benson-2. Would appreciate a comment or a little support if you have time today. Wishing you a great launch!
Hi ! sharing live numbers with customers always gave me a small knot in my stomach, that worry someone catches a figure meant for another account. This is the kind of thing that'd let me relax about it.
"If your answer is the prompt, you don't have an answer" is spot on. Same thing goes for quality: you enforce it in infrastructure, you don't ask for it in a CLAUDE.md. Do you log denied queries back to the agent so it learns the boundary, or does it stay invisible to it?