Security

LogClaw is built for enterprises where security is non-negotiable.

SOC 2 Type II

Currently in progress. Report available to enterprise customers under NDA.

Data Never Leaves Your VPC

Air-gapped mode: Ollama in-cluster LLM, Zammad in-cluster ITSM. Zero external egress required.

GDPR Compliant

Data residency controls, right to erasure, no telemetry by default.

Encryption

TLS 1.3 in transit (cert-manager), AES-256 at rest (cloud provider KMS). SCRAM-SHA-512 for Kafka.

SAML SSO + SCIM

Enterprise auth via Okta, Azure AD, Ping Identity. SCIM for automated user provisioning.

Network Isolation

Default-deny NetworkPolicy baseline. Every component opens only required ports. Namespace-per-tenant isolation.

Questions about security?

We share pen test reports, architecture diagrams, and audit logs with enterprise customers.

Contact security@logclaw.ai