# Access governance & data protection

> Reaching production data without sharing credentials: an approval chain, masking at write time and an immutable audit trail.

- Record count: 1
- Source: https://www.muhammetsafak.com.tr/en/labs/focus/erisim-yonetisimi/
- Language: en-US
- Author: Muhammet Şafak

---
## All records

### Reaching production data without handing out the password

- A self-hosted portal that puts ad-hoc production SQL behind approval, masking and an immutable trail; it became the QueryProxy product.
- What it does today: Runs a developer's SQL against production through an approval step rather than directly; results are masked as they are written to disk and every request lands in an immutable record. Teams where production access sits with one person can run it today.
- State: Became a product
- Form: Open source, Web app
- Started: 2026-09-06
- https://www.muhammetsafak.com.tr/en/labs/queryproxy-lab/
- Markdown: https://www.muhammetsafak.com.tr/en/labs/queryproxy-lab.md