Data Privacy

LogVault is built with privacy-first principles. We automatically detect and protect sensitive data before it's stored.

Automatic PII Scrubbing

Our ingestion engine automatically detects and masks personally identifiable information (PII) in your event metadata. This happens before data is written to disk.

What We Detect

• Email addresses → j***@example.com
• Credit card numbers → [REDACTED]
• Social Security Numbers (SSN/BSN) → [REDACTED]
• IBAN numbers → NL**ABNA*****1234
• Phone numbers → +31 6 **** **89
• API keys → sk_live_****
• IP addresses → Optionally anonymized

How It Works

When you send an event like this:

1client.log(
2    action="payment.processed",
3    actor_id="user_123",
4    metadata={
5        "email": "john.doe@example.com",
6        "card_number": "4111111111111111",
7        "amount": 99.99
8    }
9)

LogVault stores it as:

1{
2  "action": "payment.processed",
3  "actor_id": "user_123",
4  "metadata": {
5    "email": "j***@example.com",
6    "card_number": "[REDACTED]",
7    "amount": 99.99
8  }
9}

Configuration Options

You can customize the scrubbing behavior in your organization settings:

GDPR Compliance

LogVault helps you comply with GDPR requirements:

• Data Minimization - Only store what you need, automatically scrub the rest
• Right to Erasure - Export and delete user data on request
• Data Portability - Export audit logs in standard formats
• EU Hosting - All data stored in Frankfurt (eu-central-1)

Data Retention

Events are retained based on your plan's retention period. After expiration, data is automatically and permanently deleted.