Your evidence. Your infrastructure. Your rules.
Siglato is self-hosted and single-tenant. No telemetry, no phone-home, no vendor access to your data.
01
Self-hosted by design
Siglato runs inside your network as a Docker Compose deployment. It needs no Siglato-operated service or internet connection to run, and its licence is verified offline. Your evidence stays in your infrastructure.
02
Encryption with your keys
Defined sensitive event fields are encrypted at rest with keys you supply through your own secret management. The dashboard sits behind your TLS reverse proxy, following the deployment guidance.
03
Tamper-evident audit trail
Each record is hashed with SHA-256 and chained to the previous one. Integrity verification detects changes to chained records, including after a restore. Tamper-evident means changes are detectable, not impossible.
04
Access control and audit
Local accounts with viewer, operator and administrator roles, TOTP multi-factor authentication for privileged accounts, and API keys for ingestion. Security events are recorded in the audit trail.
05
What Siglato does not do
Siglato does not execute, block or remotely control your AI systems, and it cannot see activity your applications do not send to it. We make no certification or third-party audit claim for Siglato.
Questions about the security model?
We are happy to walk through the architecture in detail. No NDAs required.