Skip to content

Installation

  • Snowflake Enterprise Edition or higher (masking policies require Enterprise)
  • ACCOUNTADMIN role for installation and initial setup
  1. Find AIQu VEIL in the Snowflake Marketplace
  2. Click Get and follow the install flow
  3. Review and approve the requested privileges

These are requested through the Snowflake install flow. The consumer approves each one.

PrivilegePurpose
CREATE COMPUTE POOLCPU pool for inference, training pool for model training
BIND SERVICE ENDPOINTRoute queries to the encoding service
CREATE WAREHOUSEQuery training data from consumer tables
EXECUTE MANAGED TASKScheduled retraining

APPLY MASKING POLICY is not required. The app owns both the masking policies and the feature views they are applied to.

After installation, start the VEIL services:

CALL veil.core.start_services();

Wait for both services to reach ready:

CALL veil.core.wait_for_services();

This blocks until the encoding and training containers are running (up to 10 minutes).

Check service status:

CALL veil.core.service_status();

Test encoding:

SELECT veil.core.encode('sample', ARRAY_CONSTRUCT(1.0, 2.0, 3.0, 4.0));

Grant the app_admin role to administrators who will train encoders and manage protection:

GRANT APPLICATION ROLE veil.app_admin TO ROLE my_admin_role;

Grant the app_user role to roles that query protected views:

GRANT APPLICATION ROLE veil.app_user TO ROLE analyst_role;