Security & Compliance

Zero egress of source code and log data.
SaaS · On-prem · Air-gapped

Design Principles

Zero Egress

Zero Egress

Your logs never leave
your network or domain

SaaS/On-prem

SaaS/On-prem

SaaS or self-hosted options.
Air-gapped deployments supported

Control Output

Control Output

View in your dashboards
or the 10x managed console

Deployment Options

Choose the deployment model that matches your security requirements. Same product, same pricing, same features.

Capability BYO Cloud
Default · Fastest setup
Self-Managed
Enterprise · Full control
Log Processing
Where do logs get optimized?
Your infrastructure only
Edge apps run as sidecars in your Kubernetes. Logs never leave your network.
Your infrastructure only
Identical to managed. Edge apps run in your environment.
Metrics & Telemetry
What leaves your infrastructure?
Aggregated metrics only
Event counts, volume stats, pipeline UUIDs. Zero log content. Zero PII.
Your TSDB (Prometheus/Datadog)
Configure output to your observability stack. Nothing to Log10x.
Console Hosting
Where is the dashboard?
Log10x managed (AWS) · Multi-tenant
Grafana + Prometheus hosted by Log10x. Each customer gets isolated data stores with separate Prometheus instances and Grafana orgs. SSO, Auth0, MFA included.
Your infrastructure · Single-tenant
Deploy Grafana + Prometheus in your environment. Full Terraform source provided.
Security Review Scope
What does InfoSec evaluate?
Software license + metrics DPA
Review Log10x SaaS console security (AWS Managed Services: SOC 2, ISO 27001).
Software license only
No data processor evaluation. Runs entirely under your security controls.
Compliance Scope
HIPAA, GDPR, SOX audits
DPA/BAA for metrics
Log10x console (metrics only) included in audit. BAA/DPA available.
Out of audit scope
Software vendor, not data processor. No DPA/BAA required.
Air-Gap Capability
Zero external connectivity
Not air-gapped
Console requires internet for Auth0 + AWS. Not suitable for air-gapped environments.
Full air-gap supported
Apps + Console run with zero external connectivity. Mirror images locally.
Data Residency Control
Where is data stored?
Logs: your region. Metrics: us-east-1
Log data never leaves your region. EU metrics hosting on roadmap.
Complete control
Deploy in any region, cloud, or on-premises. You control all data location.
Time to Production
How fast can you deploy?
1-2 days
Helm install → configure metrics endpoint → done. Console ready immediately.
1-2 weeks
Deploy Grafana + Prometheus, configure apps, setup auth. Terraform provided.
Operations & Maintenance
Who manages infrastructure?
Shared
You manage edge apps in your K8s. Log10x manages console (uptime, updates, scaling).
You manage everything
Complete operational control. Update on your schedule. Scale as needed.
Recommended For
Typical use cases
Most customers (95%)
Fast deployment, managed console, metrics-only egress acceptable for security review.
Regulated/air-gapped
Healthcare, finance, government. Zero data egress policy. Air-gapped requirements.

Same product, same pricing, same features. Choose based on your security requirements.

Discuss Deployment Options

Technical Architecture

Detailed data flow diagrams showing how logs are processed in your infrastructure

Click diagram to enlarge
DEPLOYMENT: GitHub / Docker Hub Public or private repos Pull directly Your Infrastructure You pull and deploy 10x apps directly EDGE PROCESSING (Your Infrastructure) User App Writes logs Log Forwarder Fluentd / OTel 10x Edge Sidecar Splunk / Elastic Optimized logs ✓ Logs stay in your network • Log10x never sees them 10x Cloud Apps (Your AWS/Cloud Account) Cloud Reporter Reads S3/CloudWatch Storage Streamer Streams optimized logs Log10x SaaS AWS Managed Prometheus Stores cost metrics Auth0 Identity & access management Grafana Console Visualize metrics Edge metrics Cloud metrics
✓ Stays in Your Infrastructure
  • Artifacts: Pull from GitHub/Docker directly
  • All log data stays with you
  • Apps: Deploy in your infrastructure
→ Metrics to Log10x
  • Aggregated cost data only
  • No log content, no PII
  • Configure output in YAML

Questions About Security?

NDAs and architecture documentation available on request.