| 1 | # Agent-Cloud link (ACLK) |
| 2 | |
| 3 | The Agent-Cloud Link (ACLK) provides secure communication between your Netdata Agents and Cloud. This connection: |
| 4 | |
| 5 | - Uses outgoing secure WebSocket (WSS) on port `443` |
| 6 | - Activates only after you [connect a node](/src/claim/README.md) to your Space |
| 7 | - Ensures encrypted, safe data transmission |
| 8 | |
| 9 | For ACLK to function properly, your Agents need outbound access to Netdata Cloud services. |
| 10 | |
| 11 | | Allowlisting Method | Required Access | |
| 12 | |---------------------|----------------------------------------------------------------------------| |
| 13 | | Domain | • `app.netdata.cloud`<br/>• `api.netdata.cloud`<br/>• `mqtt.netdata.cloud` | |
| 14 | |
| 15 | > **Important** |
| 16 | > |
| 17 | > IP addresses can change without notice! Always **prefer domain allowlisting**. If you must use IP addresses, be aware that they vary based on your geographic location due to CDN-edge servers. You'll need to regularly verify the IP addresses specific to your region. |
| 18 | |
| 19 | ## Data privacy |
| 20 | |
| 21 | Your monitoring data belongs to you. Here's how we ensure this: |
| 22 | |
| 23 | - **Zero Metric Storage**: We do not store any metrics or logs in Netdata Cloud. |
| 24 | - **Local Data Control**: All your monitoring data stays within your infrastructure. |
| 25 | - **Minimal Metadata**: We store only essential metadata needed for coordination and access control. |
| 26 | |
| 27 | For complete transparency: |
| 28 | |
| 29 | - Read our detailed [Privacy Policy](https://netdata.cloud/privacy/) |
| 30 | - Learn more about [stored metadata](/docs/netdata-cloud/README.md#stored-metadata) |
| 31 | |
| 32 | ## Enable and configure the ACLK |
| 33 | |
| 34 | The Agent-Cloud Link is enabled automatically—no configuration needed. |
| 35 | If your Agent requires a proxy to access the internet, you'll need to [configure proxy settings](/src/claim/README.md#proxy-configuration). |