What Tend reads
Tend connects to BigQuery with read-only Identity and Access Management (IAM) access by default. It inspects query metadata, billing exports, andINFORMATION_SCHEMA. It reads job history, slot consumption, reservation configuration, and the amount Google charges you.
What Tend never reads
Tend does not read row-level data from your tables. It does not read column values, query result sets, or table contents. Nothing in the optimization loop requires them.
What Tend writes
Only the Slot Agent writes, and only to reservation sizing through the BigQuery Reservations API, inside the bounds you set in policy. Every change is logged with a before value, an after value, and a rollback control. For the guardrails on each agent, see the agent docs.
Third-party audit status
Clevora has not completed a third-party security audit. Clevora does not claim SOC 2 or another independent certification today.