Architecture

Built on your stack — not a separate platform.

TwiceData is not a SaaS you log into. It is a managed model system delivered into the warehouse, orchestrator, and BI tool you already pay for. Below: how the layers fit together, what we touch, and what we leave alone.

Five layers, top to bottom.

Data flows downward. Lineage and governance flow up. Every layer is wired into the next via versioned contracts, not ad-hoc joins.

Layer 01Sources
SalesforceStripePostgresSegmentKafkaOther
Layer 02Ingest
FivetranAirbyteStitchCustom PythonExisting pipelines
Layer 03Models (TwiceData)
dbt model packsLineage gatesSemantic layerCertified entitiesRBAC + freshness
Layer 04Consume
LookerMetabaseModeTableauCubeHexNotebooks
Layer 05Activate
HightouchCensusReverse ETLSlack alertsSalesforce sync

What we work with.

Warehouses
Snowflake Databricks BigQuery Redshift Palantir
Transform & orchestration
dbt Cloud dbt Core SQLMesh Dataform Dagster Airflow Prefect
BI & Semantic
Looker / LookML Cube Metricflow Metabase Mode Tableau
Cloud & infrastructure
AWS Azure Google Cloud Microsoft Fabric Terraform Pulumi
Legacy modernization
R SAS SPSS Stored procs Excel models
AI augmentation (optional)
Self-hosted LLMs Ollama / vLLM

Security, compliance, and audit.

Identity & access

Your IDP, your rules.

We integrate with whatever you already use for SSO/SCIM. We do not introduce a separate identity surface.

  • SSO via Okta, Azure AD, Google Workspace
  • SCIM provisioning for service accounts
  • Row-level security verified end-to-end
  • Audit log of every entity read
Compliance posture

Built for regulated stacks.

We've worked inside SOC2 / HIPAA / GDPR / PCI environments. Engagement scoping accommodates your audit cadence.

  • SOC2 Type II workflow alignment
  • HIPAA-friendly PII tagging + masking
  • GDPR right-to-erasure propagation
  • PCI-scoped data exclusion patterns
  • Public-sector FedRAMP-adjacent work
Data residency

Data never leaves your perimeter.

TwiceData is delivered code, not hosted infrastructure. Models run in your warehouse account. No data egress, no third-party copy.

  • All compute in your cloud account
  • Zero data egress by default
  • Customer-managed encryption keys
  • Region pinning honored
Warehouses supported
5
BI adapters
6+
Orchestrators
5
Data egress
Zero

Want a stack-mapped architecture diagram?

30-minute architecture session. We'll diagram your specific stack, identify the integration points, and send a fixed-price engagement proposal within 48 hours.