Security overview

Sazabi processes sensitive production telemetry. Logs, traces, issues, and operational context are encrypted, isolated to your organization, and processed only to run the service you requested. Sazabi acts as a data processor — it works with your data on your instructions and never uses it for any other purpose, including training models. This section explains how that works, from the data you send to the compliance program behind it. Sazabi holds SOC 2 Type II, SOC 1, ISO 27001, and ISO 27017 certifications. Anyone who signs a non-disclosure agreement, customer or not, can get the SOC 2 Type II report and ISO 27001 audit reports from the Sazabi Trust Center. See Compliance.

In this section

Data handling

Encryption, storage, retention, deletion, data residency, and how your data is used.

Bring your own cloud (BYOC)

Run the log pipeline in your own AWS account and keep logs in storage you own.

Access

Roles, project access, sign-in, two-factor, sessions, and tenant isolation.

Agent security

How the Sazabi agent investigates with least privilege in an isolated sandbox.

Compliance

SOC 2 Type II and ISO 27001 certifications, audit reports under NDA, privacy regulations, subprocessors, and security testing.

Report a vulnerability

If you have a security question or need to report a vulnerability, contact security@sazabi.ai. We maintain a direct path to report issues and respond to disclosures.