Governance evidence forsecurity, legal, and audit.
Architecture, security posture, DORA-aligned logging governance evidence, and all public documents — in one place. Supports audit preparation and GDPR accountability. Not legal advice. Not a compliance certification.
Status key used on this page
Deployment model
How Cerbi deploys into your infrastructure
Azure is the current production deployment target. AWS and GCP support are on the roadmap - they are listed here for transparency, not as current capability.
CerbiStream (SDK)
Installed in your application process. Intercepts log events at write time before any sink call. Zero network calls on the hot path. Available on NuGet, PyPI, Maven, and the Go module registry.
CerbiShield (Control Plane)
Deployed into your own Azure subscription via Azure Marketplace. Hosts the governance dashboard, policy editor, violation tracking, RBAC, and audit log. Your data never leaves your infrastructure.
View on Azure MarketplaceAWS deployment
Native AWS Marketplace listing and ARM-equivalent infrastructure-as-code. Architecture is designed for multi-cloud but AWS deployment is not yet publicly available.
Google Cloud deployment
GCP Marketplace listing and GKE-native deployment pattern. Part of the cloud portability strategy, not yet publicly available.
Runtime support matrix
Which runtimes are governed today
Click any row for install instructions.
Security & privacy posture
What Cerbi does and does not do with your data
CerbiStream enforces data minimization at the point of log emission — before any sink, SIEM, or observability platform receives the event. This supports DORA-aligned ICT risk logging requirements, GDPR accountability obligations, and audit preparation across SOC 2, HIPAA, and PCI DSS. Cerbi does not issue compliance certifications and nothing on this page constitutes legal advice.
Data stays in your infrastructure
CerbiShield deploys inside your Azure subscription. CerbiStream runs inside your application process. Cerbi never receives your raw log data.
No network calls during log emission
In-process governance adds no latency-sensitive network round trips. Rules evaluate in memory. There is no hot-path dependency on an external service.
Governance policy is version-controlled
Governance profiles are JSON files that live in your repo. They are code-reviewed, versioned, and deployed alongside your application - not configured through a third-party UI.
RBAC and audit log included
CerbiShield includes role-based access control and a full audit log of policy changes, violation events, and dashboard access. Required for SOC 2 and HIPAA audit trails.
Compliance alignment
Cerbi's governance model is designed around GDPR, SOC 2 Type II, HIPAA, and PCI-DSS logging requirements. Governance policies can be scoped per environment and per regulation.
Performance benchmarks
Governance adds near-zero overhead
All benchmarks run via BenchmarkDotNet on .NET 8. Full methodology and raw data available on the benchmarks page.
Plain logging overhead vs NLog/Serilog
~1%
CerbiStream adds approximately 1% overhead in plain structured logging benchmarks against the fastest .NET loggers.
Encryption overhead (CerbiStream vs unencrypted alternatives)
0% added
CerbiStream with encryption enabled benchmarks at 63.92ns vs 250 - 256ns for alternatives adding their own encryption layer.
PII redaction overhead
Near zero
Field-level redaction is evaluated in-memory against a compiled rule set. No regex scanning on the hot path.
Live vs planned
What you can use today vs what is coming
Live today
Planned - not yet available
Observability tool compatibility
Cerbi works with your existing stack
CerbiStream governs events before they reach any sink. The sink receives already-governed data. No pipeline changes, no new routing, no sink replacement.
Marketplace availability
Where you can install Cerbi right now
Azure Marketplace
Live todayDeploy CerbiShield (the control plane) directly into your Azure subscription. Trial and paid plans available.
OpenVisual Studio Marketplace
Live todayInstall the Cerbi Scanner extension for Azure DevOps. Scans pipelines and flags governance violations in CI.
OpenNuGet (.NET)
Live todayInstall CerbiStream for .NET via NuGet. MEL, Serilog, and NLog packages available.
OpenPublic documents
Documents available for review
Cerbi publishes governance evidence to support audit preparation and GDPR-style accountability reviews. These documents do not constitute legal advice and do not certify compliance with any regulation or standard.
Privacy Policy
How Cerbi collects, processes, and protects personal data. Includes lawful bases, data subject rights, and controller/processor roles.
Cookie Policy
Which cookies cerbi.io sets, why, and how to manage or withdraw consent at any time.
Subprocessors
List of third-party processors used by cerbi.io and by in-tenant CerbiShield deployments. Updated when processors change.
Data Processing Agreement (DPA)
Controller/processor obligations, EU SCCs, UK IDTA, and Swiss SCCs. Available on request from legal@cerbi.io.
Security Overview
In-tenant deployment model, 8 technical controls, compliance alignment table (GDPR, SOC 2, HIPAA, PCI DSS, ISO 27001), and vulnerability disclosure.
Architecture Overview
How CerbiStream (SDK) and CerbiShield (control plane) fit into your infrastructure. Covers in-process governance, sink compatibility, and Azure deployment topology.
Azure Deployment Model
CerbiShield deploys into your own Azure subscription. Your data never transits Cerbi infrastructure. ARM templates and Marketplace install covered.
Evidence Center
DORA-aligned logging governance evidence. Audit-ready summaries of governance coverage, violation counts, and policy version history.
Terms of Use
Terms governing use of the cerbi.io website and CerbiShield/CerbiStream products.
Guides & Decks
Whitepapers, sales decks, onboarding guides, and technical reference documents.
Azure Marketplace
Deploy CerbiShield into your own Azure subscription. Trial and paid plans. Reviewed and listed by Microsoft.
Not legal advice. Documents published here are provided for informational purposes and to support your internal audit and procurement processes. They do not constitute legal advice, and Cerbi does not certify your compliance with GDPR, DORA, SOC 2, HIPAA, PCI DSS, or any other regulation or standard. Engage qualified legal counsel for compliance decisions.
Time to value
How quickly a team can prove value
Most teams have CerbiStream running against real log output within 30 minutes of first install.
Install CerbiStream
Add the SDK to your application. Under ten minutes for any supported runtime.
Connect your logger
Wrap your existing MEL, Serilog, NLog, Python logging, Logback, or Go slog instance. No routing changes.
Define a governance profile
Specify which fields to redact, block, or require. Profiles are JSON, checked into your repo.
Deploy CerbiShield (optional)
If you want the dashboard and policy editor, deploy via Azure Marketplace into your subscription.
Book your onboarding call
Every plan includes a 20-minute call with the Cerbi team. No sales process.
Still have questions?
Book a 30-minute office hours call with the Cerbi team. We will walk through your architecture, answer compliance questions, and help you evaluate fit - no sales process attached.