| 1 | # Netdata Cloud Security and Privacy Design |
| 2 | |
| 3 | :::tip |
| 4 | |
| 5 | **Executive Summary** |
| 6 | |
| 7 | - Netdata Cloud offers secure real-time monitoring without storing raw metrics. |
| 8 | - Only minimal metadata passes securely through Netdata Cloud. |
| 9 | Users retain full control of their data. |
| 10 | - Infrastructure is protected with strong encryption, access control, and compliance with GDPR, CCPA, PCI DSS, SOC 2, and HIPAA standards. |
| 11 | - Netdata Cloud continuously evolves its security and privacy practices to meet the highest industry standards. |
| 12 | |
| 13 | ::: |
| 14 | |
| 15 | :::info |
| 16 | |
| 17 | Netdata achieves SOC 2 [Type 1](https://www.netdata.cloud/blog/soc2-type1/) & [Type 2](https://www.netdata.cloud/blog/soc2-type-2-compliance/) attestations, reinforcing its dedication to robust security practices for user data. |
| 18 | |
| 19 | ::: |
| 20 | |
| 21 | ## Introduction |
| 22 | |
| 23 | Netdata Cloud enables secure real-time system insights without storing raw metrics. |
| 24 | |
| 25 | Data passes through Netdata Cloud securely but isn't retained. Metric views and alerts from multiple Agents display as a unified dashboard in your browser. |
| 26 | |
| 27 | ## User Identification and Authorization |
| 28 | |
| 29 | Netdata Cloud requires only an email address for accounts. |
| 30 | |
| 31 | | **Method** | **Details** | |
| 32 | |:---------------|:---------------------------------------------------| |
| 33 | | Identification | Email via Google, GitHub, or short-lived tokens | |
| 34 | | Credentials | No passwords stored | |
| 35 | | Storage | Secure AWS storage; used for product and marketing | |
| 36 | |
| 37 | Authentication uses third-party integrations or secure tokens. Netdata Cloud never stores credentials. |
| 38 | |
| 39 | ## Data Storage and Transfer |
| 40 | |
| 41 | Netdata Cloud stores no raw metrics, only essential metadata: |
| 42 | |
| 43 | | **Metadata Stored** | **Source** | |
| 44 | |:---------------------|:----------------------------| |
| 45 | | Hostname | `/api/v1/info` endpoint | |
| 46 | | Metric Metadata | `/api/v1/contexts` endpoint | |
| 47 | | Alerts Configuration | `/api/v1/alarms` endpoint | |
| 48 | |
| 49 | All metadata is stored in AWS and copied to Google BigQuery for analytics. |
| 50 | |
| 51 | Metric data travels via secure Agent-Cloud Link (ACLK): |
| 52 | |
| 53 | - ACLK encrypts data and activates only for claimed nodes |
| 54 | - All user-Cloud communication uses TLS encryption |
| 55 | |
| 56 | ### ACLK Secure Data Flow |
| 57 | |
| 58 | ```mermaid |
| 59 | flowchart TD |
| 60 | A("Netdata Agent") -->|" Encrypts metrics<br/>and minimal metadata "| B("Agent-Cloud Link ACLK") |
| 61 | B -->|" TLS Encryption "| C("Netdata Cloud") |
| 62 | C -->|" Aggregates metadata<br/>for dashboards and alerts "| D("User Browser") |
| 63 | %% Style definitions |
| 64 | classDef alert fill: #ffeb3b, stroke: #000000, stroke-width: 3px, color: #000000, font-size: 14px |
| 65 | classDef neutral fill: #f9f9f9, stroke: #000000, stroke-width: 3px, color: #000000, font-size: 14px |
| 66 | classDef complete fill: #4caf50, stroke: #000000, stroke-width: 3px, color: #000000, font-size: 14px |
| 67 | classDef database fill: #2196F3, stroke: #000000, stroke-width: 3px, color: #000000, font-size: 14px |
| 68 | %% Apply styles |
| 69 | class A alert |
| 70 | class B neutral |
| 71 | class C database |
| 72 | class D complete |
| 73 | ``` |
| 74 | |
| 75 | ## Data Retention and Erasure |
| 76 | |
| 77 | | **Process** | **Details** | |
| 78 | |:----------------|:----------------------------------------------------| |
| 79 | | Retention | Deleted content kept 90 days | |
| 80 | | Self-Service | Modify/delete personal data via Cloud UI | |
| 81 | | Manual Requests | Written deletion requests processed under data laws | |
| 82 | |
| 83 | :::tip |
| 84 | |
| 85 | Users can delete accounts and data directly from their Netdata Cloud profile. |
| 86 | |
| 87 | ::: |
| 88 | |
| 89 | ## Infrastructure and Authentication |
| 90 | |
| 91 | Netdata Cloud uses Infrastructure as Code (IaC). |
| 92 | |
| 93 | | **Feature** | **Implementation** | |
| 94 | |:------------------------|:-------------------------------------| |
| 95 | | Infrastructure Changes | Managed via Terraform | |
| 96 | | Authentication | JWT tokens at TLS termination points | |
| 97 | | Microservices Isolation | Complete environment separation | |
| 98 | |
| 99 | Netdata Cloud never stores user credentials. |
| 100 | |
| 101 | ## Security Features and Incident Response |
| 102 | |
| 103 | Built-in security protections include: |
| 104 | |
| 105 | | **Feature** | **Details** | |
| 106 | |:--------------------------|:-----------------------------------| |
| 107 | | Infrastructure Dashboards | Centralized monitoring/alerting | |
| 108 | | Audit Logs | Role-based access tracking | |
| 109 | | DDoS Protection | Rate-limiting and blacklisting | |
| 110 | | Secure Development | Static analyzers and secure coding | |
| 111 | |
| 112 | Security vulnerabilities follow a structured process: |
| 113 | |
| 114 | - Acknowledge within three business days |
| 115 | - Analyze and fix promptly |
| 116 | - Maintain communication with reporters |
| 117 | |
| 118 | :::tip |
| 119 | |
| 120 | See [Netdata's GitHub Security Policy](https://github.com/netdata/netdata/security/policy) for details. |
| 121 | |
| 122 | ::: |
| 123 | |
| 124 | ## User Customization |
| 125 | |
| 126 | Netdata Cloud uses maximum security defaults without out-of-box customization. |
| 127 | |
| 128 | Per-contract customization options include: |
| 129 | |
| 130 | - Custom SSO |
| 131 | - Custom retention policies |
| 132 | - Advanced access controls |
| 133 | - Tailored audit logs |
| 134 | - Third-party security tool integration |
| 135 | |
| 136 | Contact Netdata Sales for enterprise solutions. |
| 137 | |
| 138 | ## Deleting Personal Data |
| 139 | |
| 140 | Users can delete personal data by: |
| 141 | |
| 142 | - Logging into Netdata Cloud |
| 143 | - Accessing Profile settings |
| 144 | - Initiating account deletion |
| 145 | |
| 146 | If self-service isn't available, submit written requests processed under applicable laws. |
| 147 | |
| 148 | ## User Privacy and Data Protection |
| 149 | |
| 150 | Netdata Cloud prioritizes privacy and data protection, continuously reviewing and updating privacy and security practices. |
| 151 | |
| 152 | | **Category** | **Details** | |
| 153 | |:--------------------------|:--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| |
| 154 | | **Data Collection** | • Email Address (account, communication, analytics)<br/>• IP Address (web proxy access logs) | |
| 155 | | **Data Usage** | • Stored in AWS databases<br/>• Copied to BigQuery for analytics<br/>• Used for product improvement<br/>• With consent, tracking via Google Analytics, Posthog, and Gainsight PX<br/>• Stripe for secure payment handling | |
| 156 | | **Data Sharing** | • No selling or sharing of personal data<br/>• Third-party services: Google Cloud/AWS (infrastructure), Stripe (payments), Analytics services | |
| 157 | | **Data Protection** | • Encrypted ACLK for all infrastructure data<br/>• TLS encryption for all user-Cloud communication | |
| 158 | | **User Control** | • Access personal data<br/>• Correct inaccuracies<br/>• Retrieve personal data<br/>• Delete accounts<br/>• Note: Temporary maintenance may limit access | |
| 159 | | **Compliance** | • Full compliance with GDPR and CCPA | |
| 160 | | **Data Transfer** | • Secure, encrypted WebSocket (WSS) connections for all transfers | |
| 161 | | **Tracking Technologies** | • With consent: analytical cookies tracked via Google Analytics, Posthog, and Gainsight PX | |
| 162 | | **Data Breach Protocol** | • Follows DPA guidelines and industry timelines<br/>• User notifications as required by data protection laws<br/>• Continuous review and updates to privacy and security practices | |