Field notes from the stream.
How we build a realtime data layer, what breaks at 1M events a second, and what teams ship once their data stops arriving late.
Every post, newest first.

SAML SSO and SCIM
Sign in through Okta, Entra ID or Google Workspace. SCIM provisions and removes users the minute HR does.

Row-level and high security
Policies written in SQL decide which rows each role, tenant or API key can read. The engine enforces them on every read.

Customer-managed keys
Bring keys from AWS KMS, Cloud KMS or Key Vault. Revoke one and every replica, backup and cache goes dark.

Audit log streaming
Every login, query, schema change and key use is signed and streamed to Splunk, Datadog or your S3 bucket.

Private link
Reach Basalt over AWS PrivateLink, Private Service Connect or Azure Private Link. No traffic touches the public internet.

Data residency
Pin projects to the EU, US, UK, Canada, Australia or Japan. Rows, logs and backups stay inside that border.
Put your data to work.
Tell us about your most challenging problem and we'll help you identify the opportunity.
