QueryPie AI Glossary - Key Terms and Definitions
A
A2A
Application-to-application communication that enables direct data exchange between software systems without human intervention. Facilitates automated workflows, API integrations, and seamless system-to-system interactions.
ABAC
ABAC (Attribute-Based Access Control) is an access control method that determines permissions based on attributes when granting access to users or resources. ABAC dynamically controls access by utilizing attribute information such as users, resources, and environments.
ACL
An ACL (Access Control List) is a list used to manage access permissions in computer systems and networks. It defines the types of operations (e.g., read, write, execute) that users or groups are allowed on specific files, directories, or network resources.
AI Agent
An autonomous software entity that can perform tasks, make decisions, and interact with systems using artificial intelligence. In QueryPie AIP, AI agents combine multiple MCP servers to execute complex workflows and business processes.
APPI
APPI (Act on the Protection of Personal Information) is a Japanese law aimed at protecting personal information, safeguarding individual privacy, and preventing unauthorized use or leakage of personal data. This law establishes rules for collecting, using, storing, and providing personal information, applying to all organizations that handle personal data in Japan.
B
BYOK
Bring Your Own LLM API Key - a feature that allows users to connect their own large language model API keys (such as OpenAI, Claude, or other LLM providers) to QueryPie AIP instead of using the platform's default models. Provides cost control, model preference flexibility, and direct billing management.
C
CCPA
CCPA (California Consumer Privacy Act) is a data privacy law in California. It grants consumers the right to know about the collection and use of their personal data, request its deletion or restrict sharing, thus strengthening data privacy. Companies are required to disclose personal data upon request and may face fines for violations.
CIEM
CIEM (Cloud Infrastructure Entitlement Management) is a process and set of tools for managing and controlling user and application access rights in cloud environments. Its primary purpose is to monitor and adjust access permissions, determining who can access specific resources and which actions are permitted.
CSPM
CSPM (Cloud Security Posture Management) is a process and set of tools for monitoring and optimizing security configurations and settings in cloud environments. CSPM’s main purpose is to assess the security status of cloud infrastructure, identify risks, and implement improvements.
D
DCL
DCL (Data Control Language) is a language used to control data and transactions, including commands to grant (GRANT) access permissions to users and revoke (REVOKE) these permissions as necessary.
DDL
DDL (Data Definition Language) is a language used to define database objects such as tables, indexes, and sequences. It is used when creating (CREATE), modifying (ALTER), or deleting (DROP) databases or tables. TRUNCATE, which deletes all data in a table, is also part of DDL.
DLP
Data Loss Prevention - a cybersecurity strategy and set of tools designed to detect, monitor, and prevent unauthorized access, sharing, or transmission of sensitive data. Protects against data breaches and ensures compliance with privacy regulations.
DML
DML (Data Manipulation Language) is a language for manipulating and retrieving stored data in a database. Common commands include SELECT for retrieval, UPDATE for modification, INSERT for addition, and DELETE for removal of data.
Docker
Docker is an open-source platform designed to simplify the development, deployment, and execution of applications. Using container technology, Docker packages applications so they can run consistently across any environment. Containers encapsulate applications and their dependencies (libraries, configuration files, etc.) and are more lightweight and faster than virtual machines (VMs).
E
Edge Tunnel
QueryPie AI's secure tunneling solution that creates a connection between cloud-based AIP services and local or private network resources. Allows access to internal systems without exposing them to the public internet, maintaining security while enabling cloud AI functionality.
EDR
EDR (Endpoint Detection and Response) is a security technology for monitoring endpoints (PCs, servers, mobile devices, etc.) on a network to detect, analyze, and respond to cyber threats and suspicious activities. It provides tools for identifying and quickly addressing threats to an organization's network endpoints.
F
FedRAMP
FedRAMP (Federal Risk and Authorization Management Program) is a program in the United States to set security standards and provide certification for cloud services, ensuring that cloud services used by government agencies meet required security and risk management standards.
G
GDPR
GDPR (General Data Protection Regulation) is an EU regulation governing the handling of personal data within the EU, establishing strict rules for data collection, use, and storage. GDPR aims to protect individual privacy and rights, requiring organizations to properly manage data and enforce fines for non-compliance.
H
HIPPA
HIPAA (Health Insurance Portability and Accountability Act) is a U.S. law for protecting medical data. It sets rules for healthcare providers and insurance companies to ensure the proper management and protection of patient health information. Violations of HIPAA may result in fines or legal action.
I
IaC
IaC (Infrastructure as Code) is a method of managing IT infrastructure (e.g., systems, networks, servers) as code. Instead of manually setting up and deploying infrastructure, IaC allows it to be managed and automated like software code.
IAM
IAM (Identity and Access Management) is a system for centrally managing user identities and access permissions across corporate applications and cloud services. It controls who can access which resources and data based on user roles, enhancing security and reducing the risk of data breaches or unauthorized access.
IdP
An IdP (Identity Provider) is a system that manages user authentication information, allowing users to access other services based on that information. IdPs are used in SAML authentication and are important for single sign-on (SSO) and centralized authentication, as well as implementing multi-factor authentication.
ISMAP
ISMAP (Information Security Management and Assessment Program) is a program in Japan to evaluate whether cloud services for government agencies provide secure and reliable information security. It specifically checks if cloud services meet security and risk management standards required by Japanese government institutions.
ISMS-P
ISMS-P (Information Security Management System for Privacy) is a framework for managing information security and privacy protection integratively. It is a certification system established to operate information security management systems that comply with personal information protection laws, such as APPI in Japan.
ISO27701
ISO 27701 is an international standard for privacy information management that provides guidelines for managing personal information appropriately within organizations. Extending ISO 27001 (information security management) and ISO 27002, ISO 27701 aims to enhance privacy protection in data collection, storage, and sharing, helping organizations comply with regulations like GDPR.
J
J-SOX
J-SOX (Japanese Sarbanes-Oxley Act) is part of Japan’s Financial Instruments and Exchange Act, requiring listed companies to strengthen internal controls and improve transparency in financial reporting. Officially called "Standards for Evaluation and Auditing of Internal Control over Financial Reporting," it was enacted in 2006, influenced by the U.S. SOX Act.
K
K-SOX
K-SOX (Korean Sarbanes-Oxley Act) is a Korean law aimed at enhancing financial reporting transparency and strengthening corporate internal controls. Officially called the "Act on Internal Control over Financial Reporting," it was established in 2002, based on the U.S. SOX Act.
Knowledge Bundle
A curated collection of information, documents, and data sources that can be integrated into AI workflows for enhanced context and decision-making. Used in Retrieval-Augmented Generation (RAG) systems to provide relevant information to LLMs.
Kubernetes (k8s)
Kubernetes (often abbreviated as k8s) is an open-source platform for automatically deploying, managing, and scaling containerized applications. It provides a suite of tools to efficiently manage multiple containers and operates in both cloud environments and on-premises infrastructure.
L
LLM
Large Language Model - advanced AI models trained on vast amounts of text data to understand and generate human-like language. Examples include GPT, Claude, and other foundation models used for natural language processing tasks.
Log Streaming
Real-time transmission of log data from applications, systems, or services to centralized monitoring or analysis platforms. Enables continuous monitoring, debugging, and operational insights.
M
MCP
Model Context Protocol - an open standard that enables AI models to connect with external data sources, tools, and services through a unified interface. Provides standardized communication between LLMs and various applications, eliminating the need for custom integrations.
MCP Preset
Pre-configured combinations of MCP servers, tools, and instructions designed for specific workflows or use cases. Users can save frequently used configurations as presets to quickly deploy standardized AI agent setups without reconfiguring individual components each time.
MDM
MDM (Mobile Device Management) is software or a system for centrally managing and monitoring employees’ mobile devices (smartphones, tablets, laptops) within an organization. It strengthens security by managing device settings, applications, and data protection, commonly known as "Mobile Device Management."
P
PAM
PAM (Privileged Access Management) is a set of tools and management techniques used to monitor and control access by users with privileged rights (such as system or network administrators) within an organization. Privileged access refers to administrator-level operations on critical parts of systems or networks.
PCI DSS
PCI DSS (Payment Card Industry Data Security Standard) is an international security standard for safely handling credit card and debit card information. It includes requirements for companies and service providers handling card information to prevent unauthorized use and data breaches. Complying with PCI DSS helps protect card information and reduce data risks for consumers and businesses.
PHI
PHI (Protected Health Information) refers to personally identifiable information related to an individual's health status or medical records. This includes diagnosis records, medical history, treatment information, prescription data, and test results. PHI contains sensitive health details, requiring special protection.
PII
PII (Personally Identifiable Information) refers to information that can identify an individual. It includes data that directly or indirectly identifies a specific person. Examples include names, addresses, phone numbers, email addresses, Social Security Numbers (SSN), and credit card numbers.
R
RAG
Retrieval-Augmented Generation - a technique that enhances LLM responses by retrieving relevant information from external knowledge bases or documents before generating answers. Combines the power of pre-trained language models with up-to-date, domain-specific information for more accurate and contextual responses.
RBAC
RBAC (Role-Based Access Control) is a method of assigning specific "roles" to users and granting access permissions based on those roles. RBAC determines which resources or data a user can access based on the user’s role.
S
SOC
SOC (Service Organization Control) is a standard for evaluating and reporting whether service organizations maintain appropriate internal controls during operations. It ensures the security, privacy, and reliability of customer data, especially for financial reporting, with three types of reports (SOC 1 ,SOC 2, and SOC 3.)
SOC 1
SOC 1 (System and Organization Controls 1) is an audit report assessing how a service organization’s services impact a customer’s financial reporting. Specifically, it evaluates the impact of outsourced services, such as data processing, cloud services, or payroll, on the client’s financial reporting.
SOC 2
SOC 2 (System and Organization Controls 2) is an audit report evaluating a service organization’s internal controls based on five Trust Services Criteria: security, availability, confidentiality, processing integrity, and privacy. SOC 2 is important for companies such as cloud, IT, data centers, and software providers to demonstrate how they protect customer data.
SOC 3
SOC 3 (System and Organization Controls 3) is an audit report that concisely demonstrates a service organization’s efforts in security and privacy protection. It summarizes SOC 2 content and is publicly accessible for transparency.
SSH
SSH (Secure Shell) is a protocol for securely accessing computers or servers over a network. It is mainly used for remote login and command execution, encrypting communication to prevent data theft or tampering.
Z
ZTNA
ZTNA (Zero Trust Network Access) is a new approach to network security that replaces traditional models. ZTNA’s fundamental principle is that there is no trusted network or device. All access is strictly verified, and only the minimum necessary permissions are granted.
