Snowflake-provided tags and Trust Center sensitive data reports are GA

What shipped

On October 20, 2026, Snowflake-provided tags became generally available (Snowflake-provided tags release note (opens in a new tab)). These out-of-the-box tags in the SNOWFLAKE.TAGS schema give you a consistent vocabulary for common governance use cases, including cost center, certification status, sensitivity, environment, and project, without creating and maintaining equivalent tags in each account.

The same day, the Trust Center Sensitive Data Entitlement and Access reports became generally available (Sensitive Data Entitlement and Access reports release note (opens in a new tab)). These reports require Enterprise Edition or higher. The Sensitive Data Entitlement report lists the users, roles, and privileges that grant access to tables containing sensitive data. The Sensitive Data Access report lists users who accessed those tables during a configurable lookback period.

Why standard tags matter

Cost center, sensitivity, and environment labels only help when they mean the same thing in every account. A shared cost center tag is what keeps cost allocation consistent across accounts, and the same shared names keep sensitivity and environment labeling aligned.

Using the reports in security reviews

In a security review, one report shows who can reach the tables. The other shows who reached them in the period you set.

Caveats

The Trust Center reports and SKIP_TAG_PROPAGATION require Enterprise Edition or higher.

How MyOrgLab helps

MyOrgLab builds governed analytics in the customer's own account. That work still sits on sound data infrastructure: Terraform, CI/CD, dbt, agile delivery, Azure DevOps, GitHub Actions, and Airflow.