Vakt360
Security & privacy by default
Error events carry some of the most sensitive context your applications produce. Vakt360 is built to keep that data in region, encrypted, scrubbed of PII, and reachable only by the systems that need it.
EU data residency
Your account data and error events are hosted and processed in the European Union (Sweden). There is no US round-trip to opt out of.
Encrypted in transit
All traffic to the ingest and API endpoints is served over TLS, and stored data is encrypted at rest on managed infrastructure.
PII scrubbed before storage
Our ingest pipeline redacts sensitive values, authorization headers, cookies, tokens and card-like numbers, on our servers before an event is written to the database.
Private database
The database is private and reachable only from our own services; it is not exposed to the public internet. Secrets are held in a managed key vault, never in code.
Scoped ingest keys
Each project has its own DSN scoped to ingest only. It cannot read your account or manage settings. Rotate a project's key at any time.
Firewall & abuse controls
The service sits behind a web application firewall, and ingestion is rate-limited and quota-bounded per project to absorb floods without affecting other tenants.
Access & audit
Passwords are hashed, two-factor authentication is available, and sensitive account actions are recorded. Access to your data is limited to running and supporting the service.
Responsible disclosure
If you believe you have found a security issue, tell us and we will investigate and fix it. We welcome coordinated disclosure and will not pursue good-faith research.
Report a vulnerability
We take reports seriously and aim to acknowledge them quickly. Email security@vakt360.com with enough detail to reproduce the issue. Please give us reasonable time to remediate before any public disclosure, and avoid accessing or modifying other users' data while testing. Our machine-readable contact is published at /.well-known/security.txt.
Documents
How we handle personal data, and the rules for using the service.