Your reports, protected end to end
How we protect your company’s data, and the answers your IT team usually asks for before approving the portal.
Your data stays in Power BI
We don’t copy or store your report data: Power BI shows it straight from the capacity. The portal only stores what it needs to work: people, permissions, settings and access logs.
One database per company
Each company has its own database, separate from the others, and its own address (yourcompany.vitrecia.com).
Encrypted credentials
Microsoft connection secrets are stored encrypted with AES-256-GCM. Passwords are stored hashed (bcrypt), never in plain text.
Sign in with Microsoft
Your team signs in with the company account, with the two-step verification and access policies your IT already has. Email and password are also available, with a 15-minute lockout after 5 failed attempts.
Everyone sees only their own
Permissions per report and per group, plus Power BI row-level security (RLS). Access to view a report is issued for one person and expires shortly.
Protected connection
HTTPS across the site, a content security policy, protection against cross-site request forgery (CSRF) and against embedding the portal in other sites. Sessions expire after 2 hours of inactivity.
Access log
You know who signed in, when and which report they opened, and admin changes are logged.
Daily backups
Daily copy of every database and uploaded file, with 14 days of history.
IT and procurement questions
Do people who view the reports need a Power BI license?
No. The portal uses Microsoft’s way of embedding reports in applications (“app owns data”): viewers need no license or Microsoft account. Only whoever builds and publishes the reports needs Power BI Pro.
Can we use it with our own employees?
Microsoft states that embedded content can be viewed by anyone, inside or outside the organization, as long as the application adds its own functionality and is not just a substitute for the Power BI service. The portal adds branding, groups, permissions, a help center, schedules, usage logs and more. For special cases, we recommend confirming it with your licensing team or your Microsoft partner.
What capacity do we need?
An F2 is usually enough to start. Each model can use up to 3 GB of memory on F2, F4 and F8 (in practice, imported models of 1 to 1.5 GB, because refresh needs extra room). Microsoft doesn’t publish a number of users per capacity: it recommends measuring. If it falls short, you move up to F4 or F8 in minutes, with no migration.
Limits of each capacity (Microsoft) Scale your capacity (Microsoft)
What happens if the capacity is overused?
Power BI spreads peaks over time. If the overuse continues, it first delays queries and then rejects them until usage drops. With the all-inclusive plan we manage the capacity; with your own Power BI, “Check the portal” warns you if it is paused or if a workspace has no capacity.
Can we pause the capacity to save money?
Yes, if you pay as you go (by the hour). The portal turns it on when someone opens a report and turns it off after a while without use or outside the schedule you choose. With a yearly reservation the price is fixed and pausing saves nothing.
Where is the data stored?
With your own Power BI, reports and their data stay in your Microsoft tenant, in your region. With the all-inclusive plan, in the capacity we manage for you. Portal data (people, permissions and logs) is on our cloud servers.
Do you comply with data protection law?
We process personal data under Colombia’s Law 1581 of 2012 and our privacy policy. Each company owns the data in its portal.
Does your IT team have a security questionnaire?
Send it to us and we will answer it with the technical detail they need.