We totally understand the hesitation there. We're launching with the hosted direct-connection form, but we have tons of plans to specifically address this concern.

First, we're actively working on a database agent (like chart.io using reverse-SSH tunneling) for increased security and control.

Second, we have longer term plans to offer this platform as an appliance, so everything stays within your infrastructure. That's obviously a much larger project.

In the mean time, we have the advantage of being able to make constant improvements to your API while being hosted.