Also known as: Satori, Satori Cyber.
At a glance
| Supported databases | Snowflake, Databricks, Amazon Redshift and MongoDB named; AWS, Azure and Google Cloud data stores (full list shown only as an image in the docs) |
| Auditing and activity monitoring | Query audit logs through the proxy; data activity monitoring |
| Masking | Dynamic masking at query time; row-level security |
| Encryption or tokenization | Not documented as a feature |
| Privileged access | Just-in-time access requests and temporary credentials for data consumers |
| Policy enforcement | Proxy (Data Access Controller) or native push-down to Snowflake and Databricks |
| Compliance reporting | Audit logs and classification; no named report packs documented |
| Deployment | SaaS console; DACs as a service or self-hosted on Kubernetes |
| Licensing | Commercial subscription, quote only |
Data Access Manager suits data teams that need to govern who sees which columns and rows in Snowflake, Databricks, Redshift and similar stores, without rewriting queries. It is a data-layer access control tool, not a privileged session manager or backup product. It is now part of Commvault, so check roadmap and packaging with Commvault before you commit.
Overview
Satori Cyber was a data security company whose platform sat between data consumers and data stores to apply access policies. Commvault completed its acquisition of Satori Cyber on 28 August 2025, and the documentation now calls the product Commvault Data Access Manager, formerly Satori. Commvault said the integration into its portfolio would roll out over the following year.
The product has two parts. A management console, which Commvault hosts as SaaS, acts as the control plane. Data Access Controllers (DACs) enforce policy on queries; the documentation says they can be used as a service or deployed in your own AWS, Azure or Google Cloud account, or on premises, because they run on Kubernetes. For Snowflake Horizon and Databricks Unity Catalog the product can also push native policies down to the platform instead of proxying traffic.
Key features
- Dynamic masking of sensitive fields such as card numbers, national IDs, names and phone numbers at query time
- Row-level security that filters returned records by the user's authorization context
- Discovery and classification of sensitive data in connected data stores
- Just-in-time access requests with approval rules per dataset, and a Data Portal for consumers
- Query audit logs through the proxy integration, reviewed in the management console
- Native policy push-down to Snowflake Horizon and Databricks Unity Catalog, manageable with Terraform
- Temporary credentials and personal access tokens for data consumers instead of shared database logins
Integrations and ecosystem
Pros and cons
Pros
- Masking and row filtering applied centrally, without changing queries or schemas
- Choice of proxy enforcement or native policies for Snowflake and Databricks
- DACs can run in your own cloud account, so query traffic can stay in your network
- Access requests and temporary credentials reduce standing access to data
Cons
- Now part of Commvault, with integration into its portfolio still rolling out
- No public pricing
- The full supported data store list is published only as an image in the documentation
- Focused on data access policy; it does not manage server, SSH or Kubernetes sessions
Pricing
Commvault publishes no prices or tiers for Data Access Manager. The product page asks you to request a demo, so expect quote-based subscription pricing. No free tier or self-serve plan is documented.
Pricing checked on the vendor's official page on 7 November 2026. Prices change; confirm before buying.
Who it is best for
Data platform teams that must apply masking, row-level rules and approved, time-limited access to analytics data in cloud warehouses.
Typical use cases
- Mask PII columns for analysts in Snowflake while data engineers see clear values
- Let users request time-limited access to a sensitive dataset with an approval step
- Find and classify sensitive columns across several warehouses before writing policies
- Produce a query audit trail of who read which data for privacy reviews
Who should look elsewhere
- Teams that mainly need brokered access to servers, Kubernetes and databases for engineers: see StrongDM.
- Organisations that need field encryption or tokenization stored in the data itself: see Protegrity.
Verdict
Commvault Data Access Manager is a focused tool for data-layer access control: masking, row filtering, classification and approved access in cloud data platforms. Its fit is strongest on Snowflake and Databricks, where it can enforce natively. The move into Commvault adds vendor scale but also some uncertainty about packaging, so confirm data store support and roadmap in writing.
Frequently asked questions
Is Satori still available?
Yes, under Commvault. Commvault completed the Satori Cyber acquisition on 28 August 2025, and its documentation now names the product Commvault Data Access Manager (formerly Satori). The old satoricyber.com site redirects to Commvault.
Does Data Access Manager sit in the query path?
It can. Data Access Controllers proxy queries and apply masking and row-level security, and they can run as a service or in your own Kubernetes environment. For Snowflake Horizon and Databricks Unity Catalog it can instead push native policies to the platform.
How is it different from StrongDM?
Data Access Manager works at the data level: which columns and rows a user sees, with masking and classification. StrongDM brokers connections to databases, servers and Kubernetes for engineers, hides credentials and logs sessions, but it is not a column masking tool.
How much does it cost?
Commvault does not publish prices. You request a demo and pricing from Commvault.
Sources
- Commvault Data Access Manager (Satori) product page
- Introduction to Data Access Manager (Commvault documentation)
- Data stores overview (Commvault documentation)
- Commvault closes acquisition of Satori (Commvault blog, 28 August 2025)
Checked November 2026.
Listed in: Database Security & Auditing.
How we research reviews and what star ratings mean: our editorial method.