# How we handle sensitive data in BigQuery

DevFeed: [How we handle sensitive data in BigQuery](<https://devfeed.tech/articles/how-we-handle-sensitive-data-in-bigquery-11812.md>)

Original publisher: [Read original article](<https://incident.io/blog/how-we-handle-sensitive-data-in-big-query>)

Author: Lambert Le Manh

Published: 2024-11-14T15:21:00Z

Content type: article

Language: en

Sources: [The incident.io Blog](<https://devfeed.tech/sources/the-incident-io-blog.md>)

Topics: [BigQuery](<https://devfeed.tech/topics/bigquery.md>), [pii](<https://devfeed.tech/topics/pii.md>), [AWS IAM](<https://devfeed.tech/topics/aws-iam.md>), [data](<https://devfeed.tech/topics/data.md>)

Tags: [bigquery](<https://devfeed.tech/tags/bigquery.md>), [data](<https://devfeed.tech/tags/data.md>), [false-positives](<https://devfeed.tech/tags/false-positives.md>), [iam](<https://devfeed.tech/tags/iam.md>), [incident](<https://devfeed.tech/tags/incident.md>), [incident-channel](<https://devfeed.tech/tags/incident-channel.md>), [incident-management](<https://devfeed.tech/tags/incident-management.md>), [incident-response](<https://devfeed.tech/tags/incident-response.md>), [outage](<https://devfeed.tech/tags/outage.md>), [pii](<https://devfeed.tech/tags/pii.md>), [policy](<https://devfeed.tech/tags/policy.md>), [post-mortem](<https://devfeed.tech/tags/post-mortem.md>), [slack-incident](<https://devfeed.tech/tags/slack-incident.md>)

## AI overview

The article explains how incident.io handles sensitive customer data in BigQuery. New columns are marked sensitive by default and masked for users without appropriate IAM permissions, while separate service accounts provide controlled access for customer-facing and internal analytics workflows. YAML files identify non-sensitive columns that can be untagged to reduce false positives.

## Source excerpt

We take handling sensitive customer data seriously. This blog explains how we manage PII and confidential data in BigQuery through default masking, automated tagging, and strict access controls.