← All use cases
CloudSaaS

Data & Analytics Agents

Snowflake Cortex AI, Databricks AI, AWS Bedrock data agents, dbt AI

What it is

Agents querying databases, generating reports, running forecasts, and triggering downstream actions based on data analysis.

What it accesses

Full data warehouse contents, customer PII, financial records, and operational data — often with write-back permissions.

What can go wrong

A data agent with write-back permissions can modify the records it was asked to analyse. Model drift means the same query produces different results after a provider update — silently.

How Sunbeam helps
Scanner finds it

Cloud scanner detects Snowflake Cortex, Databricks AI, and Bedrock agent deployments. SaaS scanner finds authenticated data tool connections.

CIM controls it

CIM contracts define read-only vs write permissions per agent. Data domain restrictions prevent cross-boundary queries.

Related incident
See what happened when this went wrong →
Relevant regulations
GDPR Article 5
EU AI Act Article 10
SOC 2 Type II
Detection surfaces
Cloud
SaaS

Find every data & analytics agent in your organisation.

Under 10 minutes. Five surfaces. No prior knowledge required.

Talk to us