# Integrations Overview Immuta does not require users to learn a new API or language to access protected data. Instead, Immuta integrates with existing tools and data platforms while remaining invisible to downstream consumers. The table below outlines features supported by each of Immuta's data platform integrations. | | Request app | Subscription policies | Data policies | Identification | Impersonation | Query audit | Tag ingestion | | -------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------- | --------------------- | -------------------- | -------------------- | ------------------------------------------------ | -------------------- | -------------------- | | [Amazon Redshift integration](https://documentation.immuta.com/saas/configuration/integrations/redshift/amazon-redshift-integration) | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :x: | :x: | :x: | | [Amazon Redshift Spectrum integration](https://documentation.immuta.com/saas/configuration/integrations/redshift/amazon-redshift-view-based-integration) | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :x: | :x: | | [Amazon S3](https://documentation.immuta.com/saas/configuration/integrations/amazon-s3-integration) | :white\_check\_mark: | :white\_check\_mark: | :x: | :white\_check\_mark: | :x: | :x: | :x: | | [AWS Lake Formation](https://documentation.immuta.com/saas/configuration/integrations/aws-lake-formation) | :white\_check\_mark: | :white\_check\_mark: | :x: | :white\_check\_mark: | :x: | :x: | :white\_check\_mark: | | [Azure Synapse Analytics](https://documentation.immuta.com/saas/configuration/integrations/azure-synapse-analytics) | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :x: | :x: | | [Databricks Lakebase](https://documentation.immuta.com/saas/configuration/integrations/databricks/databricks-lakebase) | :white\_check\_mark: | :white\_check\_mark: | :x: | :white\_check\_mark: | :x: | :x: | :x: | | [Databricks Spark](https://documentation.immuta.com/saas/configuration/integrations/databricks/databricks-spark) | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :x: | | [Databricks Unity Catalog](https://documentation.immuta.com/saas/configuration/integrations/databricks/databricks-unity-catalog) | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :x: | :white\_check\_mark: | :white\_check\_mark: | | [Google BigQuery](https://documentation.immuta.com/saas/configuration/integrations/google-bigquery) | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :x: | :x: | :x: | | [MariaDB](https://documentation.immuta.com/saas/configuration/integrations/mariadb) | :white\_check\_mark: | :x: | :x: | :x: | :x: | :x: | :x: | | [MySQL](https://documentation.immuta.com/saas/configuration/integrations/mysql) | :white\_check\_mark: | :x: | :x: | :x: | :x: | :x: | :x: | | [Oracle](https://documentation.immuta.com/saas/configuration/integrations/oracle) | :white\_check\_mark: | :x: | :x: | :white\_check\_mark: | :x: | :x: | :x: | | [PostgreSQL](https://documentation.immuta.com/saas/configuration/integrations/postgresql) | :white\_check\_mark: | :white\_check\_mark: | :x: | :white\_check\_mark: | :x: | :x: | :x: | | [Snowflake](https://documentation.immuta.com/saas/configuration/integrations/snowflake) | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | [Supported with caveats](#user-content-fn-1)[^1] | :white\_check\_mark: | :white\_check\_mark: | | [SQL Server](https://documentation.immuta.com/saas/configuration/integrations/sql-server) | :white\_check\_mark: | :x: | :x: | :white\_check\_mark: | :x: | :x: | :x: | | [Starburst (Trino)](https://documentation.immuta.com/saas/configuration/integrations/starburst-trino) | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :x: | | [Teradata](https://documentation.immuta.com/saas/configuration/integrations/teradata) | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :x: | :x: | :x: | ## Subscription policy support matrix The table below illustrates the subscription policy access types supported by each integration. If a data platform isn't included in the table, that integration does not support any subscription policies. For more details about read and write access policy support for these data platforms, see the [Subscription policy access types reference guide](https://documentation.immuta.com/saas/govern/secure-your-data/authoring-policies-in-secure/section-contents/reference-guides/subscription-access-types). | Data platform | Read access policies | Write access policies | | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | [Amazon Redshift](https://documentation.immuta.com/saas/govern/secure-your-data/authoring-policies-in-secure/section-contents/reference-guides/subscription-access-types#granting-amazon-redshift-privileges-in-the-viewless-integration) | :white\_check\_mark: | :white\_check\_mark: | | [Amazon Redshift Spectrum](https://documentation.immuta.com/saas/govern/secure-your-data/authoring-policies-in-secure/section-contents/reference-guides/subscription-access-types#granting-amazon-redshift-privileges) | :white\_check\_mark: | :x: View-based integrations are read-only | | [Amazon S3](https://documentation.immuta.com/saas/govern/secure-your-data/authoring-policies-in-secure/section-contents/reference-guides/subscription-access-types#granting-amazon-s3-privileges) | :white\_check\_mark: | :white\_check\_mark: | | [AWS Lake Formation](https://documentation.immuta.com/saas/govern/secure-your-data/authoring-policies-in-secure/section-contents/reference-guides/subscription-access-types#granting-aws-lake-formation-privileges) | :white\_check\_mark: | :white\_check\_mark: | | [Azure Synapse Analytics](https://documentation.immuta.com/saas/govern/secure-your-data/authoring-policies-in-secure/section-contents/reference-guides/subscription-access-types#granting-azure-synapse-analytics-privileges) | :white\_check\_mark: | :x: View-based integrations are read-only | | [Databricks Lakebase](https://documentation.immuta.com/saas/govern/secure-your-data/authoring-policies-in-secure/section-contents/reference-guides/subscription-access-types#granting-databricks-lakebase-privileges) | :white\_check\_mark: | :white\_check\_mark: | | [Databricks Spark](https://documentation.immuta.com/saas/govern/secure-your-data/authoring-policies-in-secure/section-contents/reference-guides/subscription-access-types#granting-databricks-spark-privileges) | :white\_check\_mark: | :x: Write access is controlled through [workspaces](https://documentation.immuta.com/saas/govern/secure-your-data/projects-and-purpose-based-access-control/write-index/reference-guides/project-workspaces#databricks-project-workspace-workflow) and [scratch paths](https://documentation.immuta.com/saas/configuration/databricks/databricks-spark/reference-guides/databricks/configuration#immuta_spark_databricks_scratch_paths) | | [Databricks Unity Catalog](https://documentation.immuta.com/saas/govern/secure-your-data/authoring-policies-in-secure/section-contents/reference-guides/subscription-access-types#granting-databricks-unity-catalog-privileges) | :white\_check\_mark: | :white\_check\_mark: | | [Google BigQuery](https://documentation.immuta.com/saas/govern/secure-your-data/authoring-policies-in-secure/section-contents/reference-guides/subscription-access-types#granting-google-bigquery-privileges) | :white\_check\_mark: | :x: View-based integrations are read-only | | [PostgreSQL](https://documentation.immuta.com/saas/govern/secure-your-data/authoring-policies-in-secure/section-contents/reference-guides/subscription-access-types#granting-postgresql-privileges) | :white\_check\_mark: | :white\_check\_mark: | | [Snowflake](https://documentation.immuta.com/saas/govern/secure-your-data/authoring-policies-in-secure/section-contents/reference-guides/subscription-access-types#granting-snowflake-privileges) | :white\_check\_mark: | :white\_check\_mark: | | [Starburst (Trino)](https://documentation.immuta.com/saas/govern/secure-your-data/authoring-policies-in-secure/section-contents/reference-guides/subscription-access-types#granting-starburst-trino-privileges) | :white\_check\_mark: | :white\_check\_mark: | | [Teradata](https://documentation.immuta.com/saas/govern/secure-your-data/authoring-policies-in-secure/section-contents/reference-guides/subscription-access-types#granting-teradata-privileges) | :white\_check\_mark: | :x: View-based integrations are read-only | ## Data policy support matrix The table below outlines the types of data policies supported for various data platforms. If a data platform isn't included in the table, that integration does not support any data policies. For details about each of these policies, see the [Data policy types page](https://documentation.immuta.com/saas/govern/secure-your-data/authoring-policies-in-secure/data-policies/reference-guides/data-policies). | | Amazon Redshift | Amazon Redshift Spectrum | Azure Synapse Analytics | Databricks Spark | Databricks Unity Catalog | Google BigQuery | Snowflake | Starburst (Trino) | Teradata | | ----------------------------------------- | -------------------- | ------------------------ | ----------------------- | ------------------------------------------------ | ------------------------------------------------ | -------------------- | -------------------- | -------------------- | -------------------- | | Cell-level masking | :x: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :x: | :white\_check\_mark: | :white\_check\_mark: | :x: | | [Custom function](#user-content-fn-2)[^2] | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :x: | | Format preserving masking | :x: | :x: | :x: | :x: | :x: | :x: | :white\_check\_mark: | :x: | :x: | | Hashing | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :x: | | Limit to purpose | :x: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | [Supported with caveats](#user-content-fn-3)[^3] | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :x: | | Masking fields within STRUCT columns | :x: | :x: | :x: | :white\_check\_mark: | [Supported with caveats](#user-content-fn-4)[^4] | :x: | :x: | :x: | :x: | | Minimize | :x: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :x: | | Only show data by time | :x: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :x: | | Only show rows (matching) | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | | Randomized response | :x: | :x: | :x: | :x: | :x: | :x: | :white\_check\_mark: | :x: | :x: | | Regex | :x: | :white\_check\_mark: | :x: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :x: | | Replace with NULL | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | [Supported with caveats](#user-content-fn-5)[^5] | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | | Replace with constant | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | [Supported with caveats](#user-content-fn-5)[^5] | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :x: | | Reversible masking | :x: | :white\_check\_mark: | :x: | :white\_check\_mark: | :x: | :x: | :white\_check\_mark: | :white\_check\_mark: | :x: | | Rounding | :x: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :x: | | WHERE clause | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | ## Identification support matrix Identification has varied support for data sources from different technologies based on the identifier type. For details about how identification works in Immuta, see the [Data identification page](https://documentation.immuta.com/saas/configuration/tags/data-discovery). | Technology | Regex | Dictionary | Column name regex | | ------------------------ | -------------------- | -------------------- | -------------------- | | Amazon Redshift | :x: | :x: | :white\_check\_mark: | | Amazon Redshift Spectrum | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | | Amazon S3 | :x: | :x: | :white\_check\_mark: | | AWS Lake Formation | :x: | :x: | :white\_check\_mark: | | Azure Synapse Analytics | :x: | :x: | :white\_check\_mark: | | Databricks Lakebase | :x: | :x: | :white\_check\_mark: | | Databricks Spark | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | | Databricks Unity Catalog | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | | Google BigQuery | :x: | :x: | :white\_check\_mark: | | MariaDB | :x: | :x: | :x: | | MySQL | :x: | :x: | :x: | | Oracle | :x: | :x: | :white\_check\_mark: | | PostgreSQL | :x: | :x: | :white\_check\_mark: | | Snowflake | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | | SQL Server | :x: | :x: | :white\_check\_mark: | | Starburst (Trino) | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | | Teradata | :x: | :x: | :white\_check\_mark: | ## Query audit support for platform queries The table below outlines what information is included in the query audit logs for each integration where query audit is supported.
SnowflakeDatabricks SparkDatabricks Unity CatalogStarburst (Trino)
Table and user coverageRegistered data sources and usersRegistered data sources and usersAll tables and usersRegistered data sources and users
Object queried✅✅✅✅
Columns returned✅❌✅✅
Rows returned✅❌✅✅
Query text✅✅✅✅
Unauthorized informationLimited support✅✅❌
**Legend**: * :white\_check\_mark: This is available and the information is included in audit logs. * :x: This is not available and the information is not included in audit logs. [^1]: Impersonation is not supported in Snowflake if [table grants](https://documentation.immuta.com/saas/configuration/integrations/snowflake/reference-guides/table-grants-overview) or [low row access policy mode](https://documentation.immuta.com/saas/configuration/integrations/snowflake/reference-guides/low-row-access-overview) is enabled. [^2]: Poorly written functions can lead to data leaks. [^3]: If you are using views in Databricks Unity Catalog, one of the following must be true for project-scoped purpose exceptions to apply to the views in Databricks: The view and underlying table are registered as Immuta data sources and added to a project or only the underlying table is registered as an Immuta data source and added to a project.
See the [Databricks Unity Catalog integration reference guide](https://documentation.immuta.com/saas/configuration/databricks/databricks-unity-catalog/unity-catalog-overview#project-scoped-purpose-exceptions-for-databricks-unity-catalog) for details. [^4]: Databricks Unity Catalog ARRAY, MAP, or STRUCT type columns only support masking with NULL. [^5]: On Databricks data sources, joins will not be allowed on data protected with replace with NULL or constant policies. [^6]: Unauthorized information is only available when the integration has [table grants](https://documentation.immuta.com/saas/configuration/integrations/snowflake/reference-guides/table-grants-overview) enabled. Unauthorized audit records will show a table name, but will not be connected to an Immuta data source.