Dashboards / Revenue
Embedportal is the glass your customers look through to see the dashboards you’ve already built in Tableau, Power BI, QuickSight and Metabase. White-labeled, row-level secure, SSO-ready — in under an hour.
The thesis
Your data is already where it lives — BigQuery, Snowflake, Redshift, Postgres. Your dashboards are already where they’re built — Tableau, Power BI, QuickSight. We don’t move any of that.
Embedportal is the glass in between. The one surface where every customer-facing dashboard shows up, themed to your brand, scoped to the right rows, behind your auth.
See what’s inside →Features
One signed URL, one iframe — render Tableau, Power BI, QuickSight and Metabase dashboards side by side. Swap the source without touching your UI.
Define rules once: by tenant, region, role, or any attribute on the JWT. We forward them into every BI vendor’s native RLS mechanism.
Theme colors, surfaces, borders, typography — all via organization settings. Each tenant looks like it was built for them.
A single Embedportal instance powers unlimited organizations, each with its own dashboards, branding, users, audit trail, and auth policy.
Gate dashboards behind your existing SSO or publish signed public links with scoped data and expiry.
Every view, filter, export — logged, searchable, streamable to your SIEM or data warehouse.
Security
Every embed is served behind a short-lived JWT signed by your backend. Row filters are forwarded into the BI vendor’s native RLS — so Tableau enforces Tableau’s rules, Power BI enforces Power BI’s, and we just make sure the right claims reach them.
// one token. the right rows. every vendor.
const token = sign({
tenant: session.orgId,
user: session.userId,
rls: {
region: session.region, // → Tableau UserFilter
role: session.role, // → Power BI EffectiveIdentity
plan: session.plan, // → QuickSight TagSession
},
exp: now() + 300, // 5-minute ceiling
}, process.env.EMBED_SECRET)
return { url: `https://portal.acme.io/d/revenue?t=${token}` }
How it works
Paste the service-account credentials for Tableau, Power BI or QuickSight. We verify the link, we never copy the data.
One JSON: tenants, roles, filter attributes. Embedportal routes each attribute into the right vendor-side rule automatically.
One React component or iframe. Pass dashboardId and tenantId. Ship.
White-label
A palette, a font, a logo — and every dashboard in the portal adopts your brand. Each organization keeps its own theme; users switch tenants without ever seeing ours.
Dashboards / Revenue
Use cases
Ship a customer-facing analytics surface without rebuilding your BI in React. Keep the charts your analysts already trust.
Own the model in dbt, own the viz in Tableau, own the distribution in Embedportal. No duplicated dashboards, no duplicated truth.
One URL for every dashboard across every vendor. Your ops team stops hunting through bookmarks, your security team stops hunting through accounts.
Deliver reporting portals per client, themed per client, scoped per client — from a single Embedportal workspace.
Pricing
Every plan — Starter to Enterprise — includes unlimited dashboards, unlimited users, and unlimited viewers.
Basic embedding.
For serious multi-tenant products.
POPULARFully managed.
Feature comparison
| Features | Starter $249/mo | Professional $499/mo Popular | Enterprise Custom |
|---|---|---|---|
|
BI integrations Power BI, Tableau, Metabase, QuickSight… |
1 | Unlimited | Unlimited |
| Dashboards / users / viewers | Unlimited | Unlimited | Unlimited |
| Row-level security (RLS) | ✓ | ✓ | ✓ |
| AES-256-GCM encryption | ✓ | ✓ | ✓ |
| Custom branding (logo, domain, email) | — | ✓ | ✓ |
| 2FA authentication | — | ✓ | ✓ |
| Audit trails & login history | — | ✓ | ✓ |
| SSO / SAML + API access | — | ✓ | ✓ |
| Dedicated instance + Metabase hosting | — | — | ✓ |
| Self-hosted (AWS / Azure / GCP) | — | — | ✓ |
FAQ
No. Your data stays inside your BI vendor’s stack (and, behind that, your warehouse). Embedportal only routes signed tokens and renders the vendor’s embed.
Tableau (Server, Cloud, Public), Power BI, QuickSight and Metabase. Additional vendors are on the roadmap — ask us.
On the Enterprise plan, yes — single-tenant deployments into your VPC, in your region. Everyone else gets the managed cloud.
You define rules in one place. We translate them into Tableau User Filters, Power BI Effective Identities, or QuickSight session tags — whichever vendor the dashboard lives in. Every request is scoped, logged, and time-bound.
Yes — a 14-day free trial on the Professional plan, no credit card required. Existing atSpark customers can upgrade to Embedportal at no additional cost.
atSpark is the full analytics platform: connectors (Airbyte), modeling (dbt), warehouse (BigQuery) and embedded viz. Embedportal is just the embedding and distribution layer, pointed at BI tools you already own.
Fourteen days, no card. Bring a dashboard, leave with a portal your customers actually want to visit.