Aggregion DataLabs & CleanRoom vs BigQuery Data Clean Rooms

Aggregion DataLabs & CleanRoom is an environment for building and running models on data shared by multiple partners. Its workflow spans cataloging, discovering partner datasets, developing models in protected DataLabs, performing CleanRoom calculations, and activating results. Partners connect through a virtual data warehouse, with structured and semi-structured data supported. DataLabs virtual machines depersonalize data and apply distortion models during development. Listed languages include Python, R, PySparc, Scala, and Java. The architecture includes adapters for RDBMS, Hive, and Kafka, plus an advanced integration API. Intel SGX hardware-level encryption is described for enclave memory during shared computations. A decentralized protocol governs metadata, permissions, rights, approvals, and related collaboration actions. Scripts may be reviewed, approved, scheduled, or invoked through API, with execution logs kept on an immutable ledger. Deployment can be cloud or on-premise, and customers choose hosting for the DataLab and enclave. Pricing is available on request.

BigQuery Data Clean Rooms let multiple parties share, join, and analyze data without moving or revealing the underlying data. The cloud service works with BigQuery sharing, and shared resources must be BigQuery tables, views, or table-valued functions. Owners manage rooms, contributors publish data, and subscribers query it. Contributors can apply analysis rules, including aggregation thresholds, and owners or publishers can offer predefined query templates without exposing the underlying tables or views. Subscribers are automatically prevented from copying or exporting raw data, while contributors can configure controls for query results. These controls have limits: Google cautions that analysis rules may not stop sophisticated queries from extracting unauthorized data, and notes that rules can be set only on views. Each room can contain at most 100 shared resources. Availability is restricted to BigQuery sharing regions, without listings across multiple regions. Rooms can be managed in the Google Cloud console or created through the API; setup requires enabling the Analytics Hub API and assigning required IAM roles. Contributors pay for storage, while subscribers pay for compute when running queries.