Compliance
Security and compliance posture for your eclawmerce deployment.
Compliance Score
8/11 checks passing · 0 DLP patterns active
Logging
Audit log enabled
All agent turns and admin actions are logged to audit_log table with actor, action, timestamp.
Data Protection
DLP scanning active
9 built-in patterns scan all LLM replies before delivery. Custom patterns configurable.
Data encryption at rest
Postgres and Redis data volumes are not encrypted at rest.
Access Control
JWT authentication on all endpoints
RS256 Keycloak JWT required on every API request. No unauthenticated endpoints.
Role-based access control
5-tier RBAC (viewer → owner). Roles enforced at FastAPI dependency level.
MFA required for admin
MFA not yet enforced in Keycloak. Recommended for production.
Incident Response
Emergency kill switches
8 kill switches with panic mode. All switches can be disabled in <1s with snapshot/restore.
Financial Controls
Daily spend caps enforced
Per-agent and global daily caps with fail-closed enforcement.
Secrets Management
Secrets not in git
.env excluded from git via .gitignore. chmod 600 applied.
Container Security
Non-root container users
All Docker containers run as non-root appuser.
Business Continuity
Automated backups
No automated database backup schedule configured.