images
Zero CVE findings
Every image in the app scans clean at every severity level, and is malware‑scanned before release.
Oliver runs inside your Snowflake account as a native app on Snowpark Container Services. Same data, same credit spend, answers in milliseconds — and nothing ever leaves your account.
One credit an hour on each side. The bars are drawn to scale.
Credits follow compute time. Across the full set of queries, Oliver spent nine seconds of it.
Snowflake delivers the app. It runs on your compute pool, reads the tables you grant it, and answers from there.
Every image in the app scans clean at every severity level, and is malware‑scanned before release.
No network rules, no external access integrations, no external functions. The app cannot call anywhere.
Rows and indexes live on an encrypted volume inside your account. Logs carry status lines, never row payloads.
Callers authenticate through Snowflake. API keys are stored only as hashes, and admin actions sit behind a role you control.
The app ships on a release channel with pinned images, so an upgrade is a deliberate, reviewable step.
Start, suspend, and resume from SQL in your own account. Suspended means zero compute, with your data intact.