Data protection

Hosted in the EU. Your data stays yours.

Vigil runs on Hetzner servers in Germany, with an Indian company behind it and no US cloud in the data path. Everything you can do about your data — shorten retention, redact PII before storage, archive to your own bucket, export, delete — is a setting, not a support ticket.

Start free Request a DPA

Where your data lives

Region: EU (Hetzner, Falkenstein, Germany). Postgres on encrypted disks; daily encrypted backups kept in the same data centre.
Checks run from: The same region. Add private locations (your own probes) for checks from inside your network or other countries; probe results are sent straight to the EU region, nothing is stored on the probe.
Sub-processors: Hetzner Online GmbH (hosting, DE) · Brevo (transactional email, FR) · Paddle (payments and invoices, UK; merchant of record) · Google (optional sign-in only). No analytics or advertising SDKs on the app pages.
Controller: PuzariCloud (Ritom Puzari), India. GDPR Art. 27 representation and a signed DPA with Standard Contractual Clauses are provided on request.
Another region, or none: Self-hosted Vigil runs on your own servers or Kubernetes cluster — any region, air-gapped if needed — with the same features.

Your data controls (Settings → Data)

Retention rules: keep checks, metrics, logs, web analytics, traces and the audit log for fewer days than your plan allows, per data class.
PII redaction at ingest: emails, IPs, card numbers, phone numbers, tokens, IBANs, plus your own patterns — applied before anything is written (logs, captured requests, error events, failure evidence).
Archive to your bucket: every day's logs, checks and incidents to your S3-compatible storage (AWS, R2, B2, MinIO, Hetzner), so nothing depends on our retention.
Export everything as JSON; delete the workspace yourself — immediate, no ticket.
Audit log of every change with actor and IP; SSO (OIDC, SAML), LDAP/AD login, SCIM provisioning, enforced 2FA, read-only auditor role, scoped API keys.

Security practices

TLS 1.2+ everywhere; HSTS; cookies HttpOnly/SameSite; CSRF tokens on every form.
Passwords hashed with bcrypt; TOTP two-factor; session revocation on disable.
Credentials you give us (SNMP, LDAP, SAML, S3, chat bots, channel webhooks) are encrypted at rest with a key held outside the database.
Agents are outbound-only (HTTPS to Vigil), read-only on the host, single-file and auditable; self-hosted releases are Ed25519-signed and verified before install.
Dependencies and the platform itself are scanned with the same vulnerability engine you get for your servers.
Isolated per-workspace data; team roles; tenants for MSPs are separate workspaces.

We are a small company and do not hold SOC 2 or ISO 27001 certificates. Ask us anything about how the platform is run: hello@puzaricloud.in.

What we collect about you

Account: email, password hash, sign-in times and IPs (audit). Billing is handled by Paddle; we never see card numbers. Product usage: pages viewed inside Vigil (our own analytics, no third parties). Monitoring data is yours; we look at it only to support you, with your permission. See the privacy policy.