Private by design. Your data never leaves your control.
Mitzu queries your warehouse in place, can run entirely inside your own AWS account, and runs its AI through your own key. Your security team decides where every byte goes.
Three levels of control
Your data stays in your warehouse
Mitzu sends SQL and gets aggregates back. Raw events are never copied out.
- W4112,408
- W4213,115
- W4312,960
Your warehouseSelf-host in your AWS account
Launch Mitzu from AWS Marketplace in one click. Nothing calls back to us.
AWS Marketplace
Mitzu, self-hosted
Mitzu app
ECS
Metadata
RDS
Sign-in
Cognito
Keys
Secrets Manager
Nothing calls back to Mitzu's cloud
Bring your own AI
Use your own Anthropic key, or your own gateway and key: OpenRouter, Amazon Bedrock and more.
- Anthropic API
- OpenRouter
- Amazon Bedrock
- Your own gateway
- Model
- eu.anthropic.claude-sonnet-5-5
- Key
- ••••••••••3f9a
Trusted by leading companies worldwide
How it fits together.
- Anthropic API
- OpenRouter
- Amazon Bedrock
- Your gateway
Warehouse-native
Queries run in your warehouse. Only aggregates come back; raw data never leaves.
Self-hosted on AWS
Launch from AWS Marketplace into your own account. Nothing calls back to Mitzu.
Bring your own AI
Use your own Anthropic key, or your own gateway and key: OpenRouter, Amazon Bedrock and more.
01
Your data stays in your warehouse.
Mitzu is warehouse-native: every chart, funnel and agent answer is a SQL query that runs where your data already lives.
- Runs on Snowflake, BigQuery, Databricks, Redshift, ClickHouse, AWS Athena, PostgreSQL, Trino, Firebolt and Microsoft Fabric.
- Connects with a read-only account; your warehouse's roles, row-level security and masking apply to every query.
- No ETL and no copies of your events, so data residency follows your warehouse region.
- Every answer shows the SQL behind it, so your security team can audit what was asked.
- Raw events and user records
- Personal data and other PII
- Your tables, behind your warehouse's roles, row-level security and masking
- Aggregated results: counts, rates and sums for each chart
- Table and column names, event names and property values for the filter menus
- Your metric definitions, dashboards and settings
02
Self-host Mitzu in your own AWS account.
For the strictest requirements, run all of Mitzu inside your perimeter. Launch it from AWS Marketplace in one click; it is ready in about 15 minutes.
- One CloudFormation stack in your account and region, on ECS, RDS, Cognito and Secrets Manager.
- Nothing calls back to Mitzu's cloud, and the app loads no marketing trackers.
- Your teams sign in through your identity provider, such as Okta or Microsoft Entra ID, over OpenID Connect.
- Upgrades roll out without downtime, and every secret lives in Secrets Manager in your account.
AWS Marketplace
Mitzu, self-hosted
Mitzu app
ECS
Metadata
RDS
Sign-in
Cognito
Keys
Secrets Manager
Nothing calls back to Mitzu's cloud
03
Bring your own AI.
Mitzu's AI runs on Claude. Point it at the provider your company already approved, under the contract you already signed.
- Use your own Anthropic key, or your own gateway and key: OpenRouter, Amazon Bedrock or any Anthropic-compatible gateway.
- Pick the model id your gateway exposes, for example a regional EU inference profile.
- Every AI feature runs on your key and is billed to your account, not Mitzu's.
- Only admins can change the key, and it is never shown again after saving.
- You control whether the AI sees query results, and your data is never used to train AI models.
- Anthropic API
- OpenRouter
- Amazon Bedrock
- Your own gateway
- Model
- eu.anthropic.claude-sonnet-5-5
- Key
- ••••••••••3f9a
Privacy and security questions
Run Mitzu where your data lives.
Book a security review and we'll walk your team through the setup that fits your requirements: in your warehouse, in your AWS account, on your own AI.