Our users are among the most diligent and security-conscious IT administrators in the world. Since CloudSQL is used to access and manage enterprise data, security has always been a top priority for us. Over the years, we’ve received numerous questions from IT teams around the globe about how CloudSQL protects sensitive information.
In response, we’ve designed CloudSQL Desktop with robust, built-in security features that align with the policies and standards of the organizations we serve.
In this blog post, we’ll provide an overview of CloudSQL Desktop’s security architecture and highlight the key features that help keep your data safe. Our goal is to address the most common concerns and give you confidence in CloudSQL Desktop’s approach to enterprise-grade security. CloudSQL Desktop is a lightweight application that runs locally on your Windows PC. It is designed to operate entirely within your organization’s network, ensuring secure and controlled access to your Oracle Fusion Cloud data.
1. Network Security
CloudSQL Desktop connects directly from your local machine to your Oracle Fusion Cloud instance using your existing Oracle credentials. Since it operates within your internal network, it follows the same security protocols as when users access Oracle Fusion through a browser. Data is viewed and downloaded directly to the local PC—there is no third-party server involved—ensuring complete control over access and data handling.
CloudSQL Desktop is built using technologies that delegates the responsibility of handling HTTPS to the underlying operating system’s networking stack, which establishes secure TLS channels for communication. This ensures that all data transmitted between CloudSQL Desktop application and Oracle Fusion is encrypted and secured using TLS. So this adheres to the security that you have configured at your organization level.
2. Adherence to Oracle Role-Based Security
CloudSQL Desktop connects to the Oracle BI layer using the user’s own Fusion credentials. Only users who have the appropriate roles assigned within Oracle Fusion can access the BI layer and run SQL queries through CloudSQL Desktop. The application uses Oracle’s publicly supported APIs for connectivity, ensuring full compliance with Oracle’s security architecture and role-based access controls.
Ofcourse, any data that is stored by the application is stored as encrypted files locally on the user’s computer.

3. Secure Credential Sharing
Oracle Fusion does not natively provide a query-only option for BI users, which can pose risks in production environments. CloudSQL Desktop addresses this by enabling organizations to create read-only access through secure credential sharing. This allows users to run queries without modifying reports or data models, enhancing the security and integrity of your BI environment

4. Trusted Software Certification
To further ensure the authenticity and integrity of the software, CloudSQL Desktop is digitally signed and certified using our certified partner, one of the leading SSL certification provider in the world. This guarantees that the software you install is genuine, has not been tampered with, and is trusted by leading operating systems and security tools—helping organizations meet high standards for software trust and compliance.

If you still have questions, please free feel to contact us