Explore, understand, and govern your MongoDB data

3T Lens brings exploration, comparison, schema analysis, automation, and PII governance together in one browser-based workspace, with policy built in from the first query.

3T Lens Governance screen showing operation policies: the policy engine and 3T Interceptor Proxy between a client and MongoDB, the list of available policies, and the details of the Allow reading data operations policy

One workspace for your whole data team

Developers, analysts, and compliance officers usually work in different tools and see different versions of the truth. 3T Lens gives them one place to work, with the same connections and the same rules, so access is governed the same way whoever is looking.

No local installations

Everything runs in a browser. Users sign in with their company identity.

No shared passwords

Connections are managed centrally, and users never see database credentials.

Governed by default

Data reads are checked against your policies before results come back.

Know what you hold, verify what changed

Inspect collections read-only, track schema drift, compare environments before you sync, and schedule recurring checks, all under the same policies.

Find sensitive data before an auditor (or bad actor) does

You can’t govern what you can’t see. The 3T Lens PII Scanner classifies every field in a collection, including nested arrays and subdocuments, according to risk.

Hybrid detection

Assess structural categories; find and tag potential credit card numbers, IBAN, US SSN, and EU national IDs, and more plus neural detection for English free text.

Scored, not just flagged

Fields are bucketed Critical, PII, Potentially Sensitive, or Likely Safe, each with a confidence score and a NIST SP 800-122 impact level.

Regulation-aware

Findings map to GDPR, HIPAA, PCI-DSS, CCPA, and LGPD.

Risk exposure

Every result states how many documents it covered, so a sample is never mistaken for a full pass.

Governance that follows the data

A report that sits in a drawer protects nothing. In 3T Lens, scan findings feed the policy engine directly, and the same policies cover Lens itself and, through the 3T Governance Proxy, every other MongoDB tool your teams use.

3T Lens and the 3T Governance Proxy share one policy engine in front of MongoDB
3T Lens and the Governance Proxy enforce one set of policies, so every path to your data is governed the same way.

Masked by role. Viewers are refused sensitive reads, standard users get masked values, and admins see the data whole.

Enforced everywhere. The Governance Proxy applies the same policies to Studio 3T, Compass, mongosh, applications, and AI agents.

Fail closed. If a required PII scan is missing, access is refused rather than passed through unchecked.

Audit-ready. CSV and JSON export, a read-only compliance auditor role, and an append-only audit trail you can stream to your SIEM.

Built for MongoDB

3T Lens comes from the team behind Studio 3T, the leading IDE for document databases. It treats documents the way MongoDB stores them: nested, polymorphic, and large.

Hosted or Self-hosted

Use 3T Lens as a hosted service, or run it in your own infrastructure.

API and MCP access

Drive scans, compares, and tasks from scripts, pipelines, your AI-enabled IDE or chat UI.

Pairs with 3TL Bridge

Ready to see your data clearly?

In a 30-minute demo, we’ll explore, compare, and scan a collection live, and show you how findings become policy. Already a Studio 3T customer? Ask your account manager about 3T Lens.