Data clean room

A machine-storage medium embodying instructions that, when executed by a machine, cause the machine to perform operations comprising:

• providing a first party data in a first account in a network-based data system;
• providing a second party data in a second account in the network-based data system;
• executing a secure function using the first party data to generate a first result, including creating links to the first party data and anonymizing identification information in the first party data;
• sharing the secure function with the second account;
• executing the secure function using the second party data to generate a second result and restricting the second account from accessing the first party data;
• generating a cross reference table with the first and second results, the cross reference table providing anonymized matches of the first and second results;
• receiving a query request related to the first and second party data;
• based on the cross reference table and the first party data, executing a first portion of the query request to generate results of the first portion of the query request;
• sharing a secure query request and the results of the first portion of the query request with the second account, the secure query request including instructions to execute a second portion of the query request;
• and
• receiving final results of the query request from the second account.

A system comprising:

• one or more processors of a machine;
• and
• a memory storing instructions that, when executed by the one or more processors, cause the machine to perform operations comprising:
• providing a first party data in a first account in a network-based data system;
• providing a second party data in a second account in the network-based data system;
• executing a secure function using the first party data to generate a first result, including creating links to the first party data and anonymizing identification information in the first party data;
• sharing the secure function with the second account;
• executing the secure function using the second party data to generate a second result, and restricting the second account from accessing the first party data;
• generating a cross reference table with the first and second results, the cross reference table providing anonymized matches of the first and second results;
• receiving a query request related to the first and second party data;
• based on the cross reference table and the first party data, executing a first portion of the query request to generate results of the first portion of the query request;
• sharing a secure query request and the results of the first portion of the query request with the second account, the secure query request including instructions to execute a second portion of the query request;
• and
• receiving final results of the query request from the second account.