Systems and techniques for securely processing disparate data sets in spreadsheets

A computer program product for securely processing disparate data sets according to functionality of a spreadsheet, the computer program product comprising computer executable code embodied in a non-transitory computer readable medium that, when executing on one or more computing devices, performs the steps of:

• receiving a source spreadsheet from a user, the source spreadsheet including a first input data set, one or more formulas configured to manipulate the first input data set thereby generating a first output data set, and one or more directives associated with the source spreadsheet, the one or more directives describing at least one of the first input data set, the one or more formulas, and the first output data set;
• compiling the source spreadsheet including translating data within the source spreadsheet into an intermediary form and extracting the one or more directives;
• writing output of the compiling of the source spreadsheet to a file;
• encrypting the file with an encryption key associated with the user thereby creating an encrypted file;
• receiving a second input data set different from the first input data set;
• and
• reading and executing the encrypted file using a runtime associated with the user, the runtime applying and manipulating the second input data set in a manner consistent with the manipulation of the first input data set in the source spreadsheet thereby generating a second output data set,
• wherein the user is associated with an enterprise having permissions for accessing one or more of the encrypted file and the runtime, and wherein the permissions of the enterprise provide the user with access to a plurality of runtimes.

A system for securely processing disparate data sets according to functionality of a spreadsheet, the system comprising:

• a data network;
• a user device coupled to the data network;
• and
• a remote computing resource coupled to the data network and accessible to the user device through the data network, the remote computing resource including a processor and a memory, the memory storing code executable by the processor to perform the steps of:
• receiving a source spreadsheet from the user over the data network, the source spreadsheet including a first input data set, one or more formulas configured to manipulate the first input data set thereby generating a first output data set, and one or more directives associated with the source spreadsheet, the one or more directives describing at least one of the first input data set, the one or more formulas, and the first output data set;
• compiling the source spreadsheet including translating data within the source spreadsheet into an intermediary form and extracting the one or more directives;
• writing output of the compiling of the source spreadsheet to a file;
• encrypting the file with an encryption key associated with the user thereby creating an encrypted file;
• receiving a second input data set different from the first input data set;
• and
• reading and executing the encrypted file using a runtime associated with the user, the runtime applying and manipulating the second input data set in a manner consistent with the manipulation of the first input data set in the source spreadsheet thereby generating a second output data set,
• wherein the user is associated with an enterprise having permissions for accessing one or more of the encrypted file and the runtime, and wherein the permissions of the enterprise provide the user with access to a plurality of runtimes.