ChillBill — Product Documentation

What ChillBill does

ChillBill ships four levels of capability that build on each other. All four are included and fully functional in this version — nothing is gated or disabled by tier:

1. Savings Scan (free, read-only) — quantifies waste across warehouses, queries, storage, and serverless, ranks each opportunity by dollar impact, and shows the exact fix.
2. Warehouse Autopilot — guardrailed, reversible optimization. Shadow mode previews every change; AUTO mode applies only reversible actions within your guardrails.
3. Expand — automation for query, storage, and serverless cost, plus chargeback / showback attribution.
4. Scale (org) — measured-savings reconciliation, role-based access control, savings-share calculation, and QBR export.

1. Install

1. In Snowsight, go to Marketplace and search for ChillBill.
2. Open the listing and select Get.
3. Choose the application database name (default: chillbill_app) and confirm to install.

2. Grant required privileges

After installation, grant the privileges the app needs to function. ChillBill uses the Snowflake Permissions SDK, so you grant these through the app — no manual SQL is required:

1. Open the ChillBill app in Snowsight. If any privileges are missing, a "Finish setup" banner appears — select Review & grant privileges. (You can also use the app's Security & access section, or the app's Security tab in Snowsight.)
2. Review each privilege and approve; Snowflake grants them to the app automatically.

The app requests:

• IMPORTED PRIVILEGES on the SNOWFLAKE database — required so the app can read ACCOUNT_USAGE and ORGANIZATION_USAGE metadata (read-only).
• EXECUTE MANAGED TASK — required to run the serverless task that drives the continuous autopilot loop.
• MANAGE WAREHOUSES — required in AUTO mode only, to apply reversible warehouse optimizations (ALTER WAREHOUSE size and auto-suspend). Shadow mode performs no writes.

3. Start the autopilot loop

The continuous loop (baselines, anomaly checks, compute, and apply) runs as a serverless task. Resume it once the privileges above are granted:

ALTER TASK chillbill_app.autopilot.autopilot_loop RESUME;

4. How it works

• Shadow mode is the default. ChillBill computes recommendations and shows exactly what it would change, without touching anything.
• When you are ready, switch to AUTO mode. ChillBill applies only reversible, guardrailed actions such as right-sizing idle warehouses, tuning auto-suspend, and setting statement timeouts.
• Every applied action writes to an immutable Savings Ledger with an estimated and later measured delta.

5. Guardrails and safety

ChillBill is designed so automation never surprises you:

• Protected warehouses — a whitelist the autopilot never touches.
• Resize caps — never resize more than N steps at once.
• Approval threshold — high-impact actions require approval.
• Business-hours window — optionally restrict changes to business hours.
• Staged rollout cap — limits actions per run.
• Circuit breaker — halts automation if usage spikes abnormally.
• One-click pause — a global kill switch disables all automation instantly.

6. Roles

ChillBill exposes application roles so you can control who can do what:

• app_admin — full control, including policy and billing settings.
• app_operator — run scans and apply actions, but no policy or billing changes.
• app_viewer — read-only access to reports and the savings ledger.

7. Trial

Your Marketplace install begins as a 30-day limited trial. During the trial you can run the Savings Scan and use the app. When the trial ends, select Request unlimited access on the listing to continue. FutureBlink will work with you on full access and pricing.

8. Trust and privacy

• Runs entirely inside your Snowflake account. Nothing leaves your account unless you optionally configure outbound alert webhooks.
• No customer table data is read or stored. Query text is never persisted; only a SHA-256 fingerprint is used.
• Only ACCOUNT_USAGE and ORGANIZATION_USAGE metadata is read.
• Every action is reversible, with a stored rollback token.

9. Frequently asked questions

Does ChillBill make changes automatically?

Not by default. It starts in Shadow mode and only applies changes in AUTO mode — always within your guardrails — and every change is reversible.

Does ChillBill read my data?

No. It reads only usage and billing metadata from ACCOUNT_USAGE and ORGANIZATION_USAGE. It never reads or stores your table data or query text.

How do I stop it?

Use the one-click global pause in the app, or suspend the task:

ALTER TASK chillbill_app.autopilot.autopilot_loop SUSPEND;