What you will be able to do
- Explain the governance principle behind Snowflake's Gen AI features: the models run inside the Snowflake perimeter and are not trained on customer data
- Choose the right Cortex AI Function for a task, and know when the REST API suits better than batch SQL
- Describe what Cortex Fine-tuning does and how it is called
- Tell Cortex Search (RAG and unstructured retrieval) apart from Cortex Analyst (text-to-SQL over structured data)
Key concept
AI inside the governance boundary — Snowflake's Gen AI features bring the models to your data, not the other way round. The LLMs are hosted inside Snowflake's service perimeter, your existing roles and privileges still decide who can see what, and customer data is not used to train models that other customers share.
1.The principle: Gen AI that runs where the data lives
Snowflake Cortex is the name for Snowflake's suite of AI features built on large language models. It includes AI Functions, Cortex Fine-tuning, Cortex Search, Cortex Analyst, Cortex Agents and Cortex Code. One principle sits under all of them: the models come to the data. Every LLM that Snowflake gives you access to is deployed inside the Snowflake Service perimeter. Your prompts and table contents therefore never have to be shipped to a third-party endpoint that you manage yourself.
The second principle is about training. The Cortex Analyst documentation states the policy directly: Snowflake does not use your Customer Data to train or fine-tune any model that is made available across its customer base. By default, Cortex Analyst runs on Snowflake-hosted LLMs from Mistral and Meta, so no data, metadata or prompts leave the governance boundary. The third principle is that existing access control still applies. Cortex Analyst integrates fully with role-based access control (RBAC), so the SQL it generates and runs obeys the same grants as any other query. Calling an AI feature is itself a privilege: AI Functions need the USE AI FUNCTIONS account-level privilege plus the CORTEX_USER or AI_FUNCTIONS_USER database role.
Checkpoint 1 of 6· Check yourself
A compliance officer asks whether prompts sent to Cortex Analyst could be used to improve a model that other Snowflake customers use. What does Snowflake's documentation say?
The documentation says plainly that Customer Data is not used to train or fine-tune shared models, and that by default no data, metadata or prompts leave Snowflake's governance boundary. It mentions no opt-in.
“We do not use your Customer Data to train or fine-tune any Model to be made available for use across our customer base.”Source: docs.snowflake.com
2.Cortex AI Functions: LLMs as SQL
The most direct way to use Cortex is through AI Functions. These are managed functions that you call from SQL, and they are also available in Python. They run LLMs from OpenAI, Anthropic, Meta, Mistral AI, DeepSeek and xAI over text, images and documents. Most are task-specific and need no customisation. AI_COMPLETE is the general-purpose function for most generative tasks.
| Function | What it does |
|---|---|
| AI_COMPLETE | Generates a completion for text or an image using a selected LLM |
| AI_CLASSIFY | Classifies text or images into user-defined categories |
| AI_FILTER | Returns True or False, so it can be used in SELECT, WHERE or JOIN ... ON |
| AI_AGG / AI_SUMMARIZE_AGG | Aggregate insights or a summary across many rows, without context window limits |
| AI_EMBED | Generates an embedding vector for similarity search, clustering and classification |
| AI_PARSE_DOCUMENT | Extracts text (OCR mode) or text with layout (LAYOUT mode) from staged documents |
| AI_REDACT | Redacts personally identifiable information (PII) from text |
| AI_COUNT_TOKENS (helper) | Returns the token count for an input, so a call stays within model limits |
AI Functions are tuned for throughput. They work best when you run them over large SQL tables in batch. When latency matters, as in an interactive app, Snowflake points you to the REST API. It offers the Complete API for simple inference, the Embed API for embeddings, and the Agents API for agentic applications.
Checkpoint 2 of 6· Check yourself
A team needs sub-second LLM responses for a chat widget in their web app. According to Snowflake's guidance, what should they use?
AI Functions are optimised for throughput and batch work. For interactive use cases where latency matters, the documentation recommends the REST API.
“For more interactive use cases where latency is important, use the REST API.”Source: docs.snowflake.com
Sources3
3.Cortex Fine-tuning: adapting a base model to your task
Sometimes prompt engineering, or even RAG, cannot give you the quality or latency a specialised task needs, and training a large model from scratch costs too much. Cortex Fine-tuning covers that middle ground. It is a fully managed service that uses parameter-efficient fine-tuning (PEFT) to build customised adaptors on top of a pre-trained model, using your own examples and without the data leaving Snowflake. The documented base model is llama3.1-8b, which has a 24K context window. Snowflake notes that the list of models may change.
Fine-tuning is exposed as one Cortex function, FINETUNE, which takes four arguments: CREATE, SHOW, DESCRIBE and CANCEL. Jobs often run for a long time and are not tied to a worksheet session. You pay for trained tokens, which are input tokens multiplied by epochs. Running AI_COMPLETE against the fine-tuned model is charged separately, and standard storage applies to the adaptors. The role that creates the job needs CREATE MODEL (or OWNERSHIP) on the target schema.
SELECT *
FROM SNOWFLAKE.ACCOUNT_USAGE.CORTEX_FINE_TUNING_USAGE_HISTORY;Checkpoint 3 of 6· Match them up
Match each FINETUNE argument to what it does
Tap a term, then the definition that fits it.
All fine-tuning lifecycle operations go through the single FINETUNE function, and the first argument selects the operation.
“CREATE: Creates a fine-tuning job with the given training data.”Source: docs.snowflake.com
Sources4
4.Cortex Search: retrieval for RAG and unstructured data
A fine-tuned or general-purpose LLM still knows nothing about the document you added to a table this morning. Cortex Search closes that gap. It is a managed hybrid search engine that combines vector and keyword search over your text data. Snowflake handles the embeddings, the infrastructure, quality tuning and index refreshes for you. Its two primary use cases are retrieval augmented generation (RAG) and enterprise search. In RAG, Cortex Search retrieves relevant passages and an LLM function such as AI_COMPLETE writes an answer grounded in them. Cortex Search is also the retrieval layer for Cortex Agents when they work over unstructured data.
Unstructured data reaches Cortex Search in two ways. You can index text columns in a table or view, for example text produced by AI_PARSE_DOCUMENT, which the docs describe as suited to parsing documents for analytics and RAG pipelines. In Snowsight you can also point a service directly at files in a stage, a capability marked Preview. A service is one SQL statement. TARGET_LAG controls how far the index may lag behind the base table.
Checkpoint 4 of 6· Fill the gap
Which parameter tells this Cortex Search Service to check the base table for updates about once a day?
CREATE OR REPLACE CORTEX SEARCH SERVICE transcript_search_service
ON transcript_text
ATTRIBUTES region
WAREHOUSE = cortex_search_wh
? = '1 day'
EMBEDDING_MODEL = 'snowflake-arctic-embed-l-v2.0'
AS (
SELECT
transcript_text,
region,
agent_id
FROM support_transcripts
);TARGET_LAG sets how far the service may lag behind its base table. Here the service checks support_transcripts for updates about once per day.
Source: docs.snowflake.comCheckpoint 5 of 6· Exam question
A prospective customer asks how Snowflake protects their data when using Cortex AI functions such as AI_COMPLETE. Which statement accurately describes Snowflake's core Gen AI security principle?
Correct answer: B — Snowflake processes AI requests inside its own security and governance perimeter and never uses customer data to train models shared with other customers
- A. This is incorrect: Cortex AI functions execute within Snowflake's own security and governance perimeter, so query data is not exported to an external provider's infrastructure for processing.
- B. This is correct: all AI processing happens inside Snowflake's account boundary, and customer data is never used to train shared or foundation models made available to other customers.
- C. This is incorrect: Snowflake explicitly does not pool customer data across accounts to retrain shared models, since that would violate per-customer data isolation.
- D. This is incorrect: there is no requirement to migrate data into a separate shared lake; Cortex AI functions operate directly on data already stored in the customer's own account.
5.Cortex Analyst: text-to-SQL over structured data
Cortex Search is for unstructured text. Cortex Analyst is its counterpart for structured data. It is a fully managed, LLM-powered agentic system that turns a business user's natural-language question into SQL, then runs that SQL in your own virtual warehouse. The model sees only metadata (table and column names, types and descriptions), and RBAC applies to the query it produces. Accuracy comes from semantic views. These are schema-level objects that define logical tables, dimensions, facts, metrics and relationships, and they can include verified example questions. Snowflake recommends them over the older YAML semantic model files on a stage. Cortex Analyst is API-first: it is delivered as a REST API so you can embed it in Streamlit apps, Slack, Teams or a custom chat interface.
Checkpoint 6 of 6· Check yourself
Sales managers want to type questions like 'What was revenue by region last quarter?' into a Teams bot and get answers from Snowflake tables without writing SQL. Which feature fits this use case?
This is a text-to-SQL question over structured data, which is what Cortex Analyst is for. Its REST API is designed to plug into tools such as Teams.
“business users can ask questions in natural language and receive direct answers without writing SQL”Source: docs.snowflake.com
Sources1
Exam traps
Each one states something that sounds right. Open it to see what is actually true.
1.AI Functions such as AI_COMPLETE are the best choice for low-latency, interactive applications.Why is that wrong?
AI Functions are optimised for throughput and batch processing over tables. For interactive, latency-sensitive use, Snowflake recommends the REST API (Complete, Embed or Agents API).
Covered in Cortex AI Functions: LLMs as SQL
2.Cortex Fine-tuning trains a new large model from scratch on your data.Why is that wrong?
It uses parameter-efficient fine-tuning (PEFT) to build adaptors on top of an existing pre-trained base model.
Covered in Cortex Fine-tuning: adapting a base model to your task
3.Cortex Analyst only needs a database schema to generate accurate SQL.Why is that wrong?
Schemas lack business definitions. Cortex Analyst relies on a semantic view (or legacy semantic model YAML) to describe metrics, dimensions and joins.
Sources
Every claim above is drawn from one of these pages, quoted as it was written on the date shown.
- 1.
“Cortex Analyst does not train on Customer Data.”
↩︎ The principle: Gen AI that runs where the data lives“Available as a convenient REST API, Cortex Analyst can be seamlessly integrated into any application.”
↩︎ Cortex Analyst: text-to-SQL over structured data“Cortex Analyst uses Semantic Views to understand your data and generate accurate SQL queries.”
↩︎ Exam trap 3“We do not use your Customer Data to train or fine-tune any Model to be made available for use across our customer base.”
↩︎ Checkpoint“Cortex Analyst overcomes this limitation by using a semantic model to bridge the gap between business users and databases.”
↩︎ Prediction“business users can ask questions in natural language and receive direct answers without writing SQL”
↩︎ Checkpoint - 2.
“Snowflake Cortex is a suite of AI features that use large language models (LLMs) to understand unstructured data”
↩︎ The principle: Gen AI that runs where the data lives - 3.
“Batch processing is typically better suited for AI Functions.”
↩︎ Cortex AI Functions: LLMs as SQL“Parsing documents for analytics and RAG pipelines”
↩︎ Cortex Search: retrieval for RAG and unstructured data“All the LLMs that Snowflake provides access to via our Snowflake AI Features are deployed within the Snowflake Service perimeter.”
↩︎ Key concept“Cortex AI Functions are optimized for throughput.”
↩︎ Exam trap 1“For more interactive use cases where latency is important, use the REST API.”
↩︎ Checkpoint - 4.
“Cortex Fine-tuning is a fully managed service that lets you fine-tune popular LLMs using your data, all within Snowflake.”
↩︎ Cortex Fine-tuning: adapting a base model to your task“Cortex Fine-tuning allows users to leverage parameter-efficient fine-tuning (PEFT) to create customized adaptors for use with pre-trained models on more specialized tasks.”
↩︎ Exam trap 2“CREATE: Creates a fine-tuning job with the given training data.”
↩︎ Checkpoint - 5.https://docs.snowflake.com/en/user-guide/snowflake-cortex/cortex-search/cortex-search-overviewOfficial docs
“The two primary use cases for Cortex Search are retrieval augmented generation (RAG) and enterprise search.”
↩︎ Cortex Search: retrieval for RAG and unstructured data“Powering agents with unstructured data: Use Cortex Search as the retrieval layer for Cortex Agents.”
↩︎ Cortex Search: retrieval for RAG and unstructured data