Queries

No. The connection is a read-only replica role and the generated SQL is shown before it runs. If it cannot read a column, it says so rather than guessing around it.

You see the SQL, not just the chart. Correct it once and the correction is saved against that question for everyone who asks it after you.

Your data team. Definitions live in version control and get reviewed like code, and every answer carries the version it used - so two people asking the same question get the same number.

Yes, on the regulated plan: single-tenant, in a VPC you own, with keys in your KMS. Nothing leaves the account except the answer somebody asked for.

The index is rebuilt nightly, so schema size costs nothing at query time. Median time to a first chart is 3.4 seconds across roughly 1,284 tables.

Nothing writes, so the worst case is a bad chart. Every question is logged with its SQL and its result, which makes a wrong answer reproducible.