Product · Secure Data Tunnel

AthenaDB Secure Data Tunnel

Instead of building an app API gateway to pull data, AthenaDB securely fetches and moves data on behalf of your application. Short-lived tunnel keys rotate regularly, and the same secure path works with AthenaDB Lite in your app or AthenaDB Server — including CSP-hosted deployments.

In progress

Early Access — building now

Instance Trust Fabric AthenaDB Lite

Built for app providers

Stop wiring every application to a custom data gateway. AthenaDB owns the secure path: authenticate, rotate keys, fetch or push under policy, and return results to your app.

AthenaDB fetches and exchanges data for the app — no separate data API gateway required
Bidirectional secure tunnel for moving data back and forth under policy
Session keys that rotate regularly with forward-secrecy intent
Works with AthenaDB Lite in-process and AthenaDB Server
Available across all AthenaDB editions, including CSP Edition

How it works

App asks AthenaDB

Your application requests a fetch, push, or exchange through the local AthenaDB API — Lite embedded in-process or Server over the usual client path.

Tunnel opens with rotating keys

AthenaDB authenticates the peer, negotiates short-lived tunnel keys, and opens a policy-governed path. Keys rotate on session and lease boundaries.

Database moves the data

AthenaDB performs the secure transfer and returns results or status to the app. Remotes stay under Trust Fabric rules — structured, permission-filtered exchange, not raw remote SQL.

Lite, Server, and CSP

Embed AthenaDB Lite in your application and let the in-process engine open tunnels for you. Or connect to AthenaDB Server and use the same model from a networked service. CSP Edition inherits the same Secure Data Tunnel capability on provider-operated nodes.

The tunnel rides AthenaDB’s Trust Fabric identity and Sync session cryptography — permission-filtered, auditable exchange rather than exposing raw remote SQL to every app.

CSP Edition Get started

FAQ

Is this only for cloud service providers?: No. Secure Data Tunnel is a core AthenaDB feature for all versions — Lite in your app, AthenaDB Server, and CSP Edition alike.
Does my app still need an API gateway to fetch database data?: For AthenaDB-mediated exchange, no. The database opens the secure tunnel, rotates keys, and moves the data. Your app asks AthenaDB; AthenaDB handles the secure fetch and exchange.
How do the keys work?: Tunnel sessions negotiate short-lived keys that rotate regularly. Prior session keys are discarded so older traffic is not unlocked by a later compromise of ephemeral material.
Is it available now?: It is in Early Access planning. Trust Fabric identity and Sync session crypto foundations exist in the engine; the named Secure Data Tunnel product surface is being built.