> ## Documentation Index
> Fetch the complete documentation index at: https://docs.encoreos.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Embedded Analytics

> Build no-SQL dashboards from curated metrics, govern the semantic registry, and embed branded analytics — all tenant-isolated and audit-logged.

The Embedded Analytics Platform (PF-123) lets a tenant organization build dashboards from a governed catalog of metrics and dimensions — no SQL required — and serves them from a per-organization analytical store so heavy dashboards never degrade transactional performance. Every query is tenant-isolated and audit-logged, and small-population groups are suppressed to prevent re-identification.

## Dashboard library

The library at `/analytics` (permission `pf.analytics.view`) lists your organization's saved and org-shared dashboards. An illustrated empty state links straight into the builder when no dashboards exist yet.

<Frame caption="Analytics library — saved and org-shared dashboards over your organization's data.">
  <img src="https://mintcdn.com/encoreos/9uGfYOeeHogjmoRk/images/pf/pf-123-analytics-library.png?fit=max&auto=format&n=9uGfYOeeHogjmoRk&q=85&s=e96f3c2c04af77b746f7f5aaeceddf29" alt="Analytics dashboard library" width="1440" height="900" data-path="images/pf/pf-123-analytics-library.png" />
</Frame>

## No-SQL builder

The builder at `/analytics/builder` (permission `pf.analytics.create`) composes a dashboard from curated **measures** and a **group-by dimension**, then runs the query through a server-side mediation RPC. Only metric, dimension, and filter keys present in the semantic registry allowlist are accepted — there is no SQL editor anywhere in the surface. SUD-derived measures carry a visible flag.

<Frame caption="Dashboard builder — pick curated measures and a group-by dimension; serving and suppression happen server-side.">
  <img src="https://mintcdn.com/encoreos/9uGfYOeeHogjmoRk/images/pf/pf-123-analytics-builder.png?fit=max&auto=format&n=9uGfYOeeHogjmoRk&q=85&s=d6151c9042c21a146b2055a359c6d1e0" alt="No-SQL dashboard builder" width="1440" height="900" data-path="images/pf/pf-123-analytics-builder.png" />
</Frame>

## Administration

The admin surface at `/analytics/admin` (permission `pf.analytics.admin`) is a read-oriented overview of the governed registry, per-tenant theming, and privacy settings:

* **Privacy** — the minimum cell size used for small-population suppression is resolved from the organization's jurisdiction profile (PF-96), not hardcoded. Groups below this size are suppressed on every surface.
* **Semantic registry** — the metrics and dimensions available to the builder, with scope (global vs. org) and a **SUD / Part 2** badge on any metric derived from 42 CFR Part 2 data.
* **Themes** — per-tenant chart and embed branding.

<Frame caption="Analytics administration — semantic registry with the SUD/Part 2 flag and the PF-96-resolved minimum cell size.">
  <img src="https://mintcdn.com/encoreos/9uGfYOeeHogjmoRk/images/pf/pf-123-analytics-admin.png?fit=max&auto=format&n=9uGfYOeeHogjmoRk&q=85&s=75d3e2545ce3683080cc72ee78f61389" alt="Analytics administration" width="1440" height="900" data-path="images/pf/pf-123-analytics-admin.png" />
</Frame>

## Privacy & compliance

* **Tenant isolation** holds on every path (interactive, export, drill-through, scheduled, embed): the organization is resolved from the authenticated session and any client-supplied organization identifier is ignored.
* **Small-population suppression** hides below-threshold group values and applies complementary (secondary) suppression so a suppressed value cannot be recovered by differencing against visible totals.
* **SUD / 42 CFR Part 2** metrics are blocked from external embed unless per-organization consent and configuration permit it.
* **Audit** — every analytics query records the user, organization, surface, embed token (if any), semantic-spec hash, row count, latency, and status.

## Who it's for

| Surface           | Route                | Permission            |
| ----------------- | -------------------- | --------------------- |
| Dashboard library | `/analytics`         | `pf.analytics.view`   |
| No-SQL builder    | `/analytics/builder` | `pf.analytics.create` |
| Administration    | `/analytics/admin`   | `pf.analytics.admin`  |