Netdata Cloud Security and Privacy Design

:::tip

Executive Summary

• Netdata Cloud offers secure real-time monitoring without storing raw metrics.
• Only minimal metadata passes securely through Netdata Cloud.
  Users retain full control of their data.
• Infrastructure is protected with strong encryption, access control, and compliance with GDPR, CCPA, PCI DSS, SOC 2, and HIPAA standards.
• Netdata Cloud continuously evolves its security and privacy practices to meet the highest industry standards.

:::

:::info

Netdata achieves SOC 2 Type 1 & Type 2 attestations, reinforcing its dedication to robust security practices for user data.

:::

Introduction

Netdata Cloud enables secure real-time system insights without storing raw metrics.

Data passes through Netdata Cloud securely but isn't retained. Metric views and alerts from multiple Agents display as a unified dashboard in your browser.

User Identification and Authorization

Netdata Cloud requires only an email address for accounts.

Authentication uses third-party integrations or secure tokens. Netdata Cloud never stores credentials.

Data Storage and Transfer

Netdata Cloud stores no raw metrics, only essential metadata:

All metadata is stored in AWS and copied to Google BigQuery for analytics.

Metric data travels via secure Agent-Cloud Link (ACLK):

• ACLK encrypts data and activates only for claimed nodes
• All user-Cloud communication uses TLS encryption

ACLK Secure Data Flow

flowchart TD
    A("Netdata Agent") -->|" Encrypts metrics
and minimal metadata "| B("Agent-Cloud Link ACLK")
    B -->|" TLS Encryption "| C("Netdata Cloud")
    C -->|" Aggregates metadata
for dashboards and alerts "| D("User Browser")
%% Style definitions
    classDef alert fill: #ffeb3b, stroke: #000000, stroke-width: 3px, color: #000000, font-size: 14px
    classDef neutral fill: #f9f9f9, stroke: #000000, stroke-width: 3px, color: #000000, font-size: 14px
    classDef complete fill: #4caf50, stroke: #000000, stroke-width: 3px, color: #000000, font-size: 14px
    classDef database fill: #2196F3, stroke: #000000, stroke-width: 3px, color: #000000, font-size: 14px
%% Apply styles
    class A alert
    class B neutral
    class C database
    class D complete

Data Retention and Erasure

:::tip

Users can delete accounts and data directly from their Netdata Cloud profile.

:::

Infrastructure and Authentication

Netdata Cloud uses Infrastructure as Code (IaC).

Netdata Cloud never stores user credentials.

Security Features and Incident Response

Built-in security protections include:

Security vulnerabilities follow a structured process:

• Acknowledge within three business days
• Analyze and fix promptly
• Maintain communication with reporters

:::tip

See Netdata's GitHub Security Policy for details.

:::

User Customization

Netdata Cloud uses maximum security defaults without out-of-box customization.

Per-contract customization options include:

• Custom SSO
• Custom retention policies
• Advanced access controls
• Tailored audit logs
• Third-party security tool integration

Contact Netdata Sales for enterprise solutions.

Deleting Personal Data

Users can delete personal data by:

• Logging into Netdata Cloud
• Accessing Profile settings
• Initiating account deletion

If self-service isn't available, submit written requests processed under applicable laws.

User Privacy and Data Protection

Netdata Cloud prioritizes privacy and data protection, continuously reviewing and updating privacy and security practices.