Security and Microsoft certification
What certification covers, how report data is handled, and which Power BI privileges the visual declares.
What certification means
Ataytis Matrix is a Microsoft-certified Power BI visual. Certified visuals are Marketplace visuals that have passed an additional Microsoft review beyond normal publication, including code review and static analysis, penetration and cross-site-scripting testing, data fuzzing, and verification that the visual makes no outbound network requests.
Certification also lets tenant administrators permit the visual under the certified-visuals-only setting, and makes it eligible for scenarios such as PowerPoint export and images in subscription emails.
How data is handled
| Information | How it is handled |
|---|---|
| Report data | Supplied by Power BI and rendered inside the visual sandbox. The visual makes no outbound HTTP, WebSocket, or fetch requests of any kind, and this is verified by Microsoft rather than asserted by us. |
| Visual configuration | Formatting, conditional rules, sparkline settings, and calculations are stored with the visual in the report. |
| Comments, notes, and annotations | Stored as part of the visual's state in the report, not sent anywhere else. |
| Exported files | Written locally by the reader's browser through the declared export privilege. An exported file must be governed like any other business document. |
| Custom SVG icons | Stored with the visual and rendered inline. No external request is made to fetch them. |
Declared privileges
The visual declares one Power BI privilege, ExportContent, marked non-essential, which is used for the XLSX, CSV, and PDF export features. It does not request WebAccess or LocalStorage. If your tenant blocks downloads from custom visuals, export is unavailable and the Copy button is the fallback; everything else works normally.