Guardian watches every pull of data

Guardian checks every query before it runs. It allows one read and nothing else, and it looks at what is being pulled: how many rows, and whether they hold personal data such as names, emails or phone numbers.

An unusual pull is flagged and written to the security log with who asked and why. The log is yours to read.