Yes. Rabbit holds ISO 27001 certification and passed SOC 2 Type II audit, alongside GDPR Data Processor status with a named DPO and a maintained Record of Processing Activities. Compliance documentation (including the ISO certificate and DPA) is available to your security and procurement teams on request.

Rabbit runs in a dedicated Google Cloud project per customer, hosted in the EU or US by default. Any GCP region is available on request, set up at onboarding. Backups stay in the same region as your data.

Access inherits from your identity provider through Google SSO (OAuth/OIDC): no separate passwords to manage. Domain-level and scoped RBAC roles restrict users to specific projects or folders, and joiner/mover/leaver changes sync automatically through Google Groups. Full audit logs are available on request.

Rabbit deletes your data within 60 days of contract end, with backups purged within 90 days. How does Rabbit roll out without touching production on day one? Rabbit starts with a metadata-only assessment over APIs; no changes, no access to your data. Findings are quantified in dollars and engineering hours across every project. Your team can review and apply recommendations manually before any always-on optimizer or automated PR is turned on. All dependent on your level of trust – and we’re there to guide you through.

No. Recommendations are the default everywhere: your team reviews and applies them manually. Always-on optimizers and PR-based automation are opt-in, turned on one workflow at a time inside guardrails you set. Nothing changes in production until you enable it.

Yes. Rabbit applies the same optimizers, policies, and guardrails whether a BigQuery estate spans ten projects or hundreds. Slot priority rules, commitment planning, and spend caps apply consistently across every project and team, so standards don't drift as the organization scales.
Nordstrom and Lufthansa Group already run Rabbit across large, multi-project BigQuery estates. Read their full stories on the customer stories page.

Setup takes hours, not weeks. Sign-up uses Google SSO through a 4-step wizard: connect your GCP Org ID and billing export, then run a generated script that grants Rabbit's service account metadata-only, least-privilege access. Data loads in the background (hours to a few days for large orgs), and your Domain Admin is notified once the dashboard is fully populated.

The one step outside Rabbit's control: enable your BigQuery billing exports early, since GCP can take a few days to populate them before the wizard can use them.

Yes. Rabbit is a Google Cloud Partner, listed on Google Cloud Marketplace. Procurement can transact through your existing GCP vendor relationship instead of onboarding a new vendor, and the cost appears as a single line item on your GCP bill that counts toward committed Google Cloud spend.