Integrations Overview

Immuta does not require users to learn a new API or language to access protected data. Instead, Immuta integrates with existing tools and data platforms while remaining invisible to downstream consumers.

The table below outlines features supported by each of Immuta's data platform integrations.

	Subscription policies	Data policies	Identification	Impersonation	Query audit	Tag ingestion
Amazon Redshift	✅	✅	✅	✅	❌	❌
Amazon S3	✅	❌	✅	❌	❌	❌
Azure Synapse Analytics	✅	✅	✅	✅	❌	❌
Databricks Spark	✅	✅	✅	✅	✅	❌
Databricks Unity Catalog	✅	✅	✅	❌	✅	✅
Google BigQuery	✅	✅	✅	❌	❌	❌
Snowflake	✅	✅	✅	Supported with caveats	✅	✅
Starburst (Trino)	✅	✅	✅	✅	✅	❌

Subscription policy support matrix

The table below illustrates the subscription policy access types supported by each integration. If a data platform isn't included in the table, that integration does not support any subscription policies. For more details about read and write access policy support for these data platforms, see the Subscription policy access types reference guide.

Integration	Read access policies	Write access policies
Amazon Redshift	✅	❌ View-based integrations are read-only
Amazon S3	✅	✅
Azure Synapse Analytics	✅	❌ View-based integrations are read-only
Databricks Spark	✅	❌ Write access is controlled through workspaces and scratch paths
Databricks Unity Catalog	✅	✅
Google BigQuery	✅	❌ View-based integrations are read-only
Snowflake	✅	✅
Starburst (Trino)	✅	✅

Data policy support matrix

The table below outlines the types of data policies supported for various data platforms. If a data platform isn't included in the table, that integration does not support any data policies.

For details about each of these policies, see the Data policy types page.

	Amazon Redshift	Azure Synapse Analytics	Databricks Spark	Databricks Unity Catalog	Google BigQuery	Snowflake	Starburst (Trino)
Reversible masking	✅	❌	✅	❌	❌	✅	✅
Conditional masking	✅	✅	✅	✅	❌	✅	✅
Hashing	✅	✅	✅	✅	✅	✅	✅
Replace with NULL or constant	✅	✅	Supported with caveats	✅	✅	✅	✅
Rounding	✅	✅	✅	✅	✅	✅	✅
Regex	✅	❌	✅	✅	✅	✅	✅
Format preserving masking	❌	❌	❌	❌	❌	✅	❌
Randomized response	❌	❌	❌	❌	❌	✅	❌
Masking fields within STRUCT columns	❌	❌	✅	Supported with caveats	❌	❌	❌
Custom function	✅	✅	✅	✅	✅	✅	✅
Only show data by time	✅	✅	✅	✅	✅	✅	✅
Minimize	✅	✅	✅	✅	✅	✅	✅
WHERE clause	✅	✅	✅	✅	✅	✅	✅
Matching	✅	✅	✅	✅	✅	✅	✅

Identification support matrix

Identification has varied support for data sources from different technologies based on the identifier type. For details about how identification works in Immuta, see the Data identification page.

Technology	Regex	Dictionary	Column name regex
Amazon Redshift	✅	✅	✅
Amazon S3	❌	❌	✅
Azure Synapse Analytics	❌	❌	✅
Databricks	✅	✅	✅
Google BigQuery	❌	❌	✅
Snowflake	✅	✅	✅
Starburst (Trino)	✅	✅	✅

Query audit support for platform queries

The table below outlines what information is included in the query audit logs for each integration where query audit is supported.

	Databricks Spark	Databricks Unity Catalog	Snowflake	Starburst (Trino)
Table and user coverage	Registered data sources and users	All tables and users	Registered data sources and users	Registered data sources and users
Object queried	✅	Limited support	✅	✅
Columns returned	❌	❌	✅	✅
Query text	✅	Limited support	✅	✅
Unauthorized information	✅	Limited support	Limited support	❌
Policy details	✅	❌	❌	❌
User's entitlements	✅	❌	❌	❌
Column tags	❌	❌	✅	✅
Table tags	❌	❌	✅	❌

Legend:

• ✅ This is available and the information is included in audit logs.

• ❌ This is not available and the information is not included in audit logs.