A factual view of what is live today, what is not, and what your security or compliance team still needs to evaluate.
Admin, Member, and Viewer roles restrict account and configuration actions. This is a technical control, not a compliance certification.
Application audit events are searchable and exportable. The current store is not a write-once, tamper-evident ledger.
Production tenant workloads currently run in Falkenstein, Germany. Customer-selectable regions are not generally available.
No standard DPA or HIPAA BAA is currently available. Do not process PHI or covered regulated data without appropriate terms.
The dashboard includes SSO configuration for SAML/OIDC. Validate your identity provider and role-mapping requirements during evaluation.
Off-box monitoring and deep health checks are live. The service still has a single-host failure domain and no formal uptime SLA.
Use only after a vendor-risk review. The current service is not SOC 2 certified and should not be represented as satisfying a financial regulator.
Do not process PHI. KiwiClaw does not currently sign BAAs and does not claim HIPAA compliance.
gVisor isolation and network controls reduce cross-tenant risk, but legal teams must complete their own privilege, retention, and vendor review.
RBAC and per-agent isolation support multi-client organization. Confirm capacity and support expectations before a large rollout.
We will document the current controls and gaps against your stated requirements. No certification or SLA is implied.
KiwiClaw has live technical controls including RBAC, SSO configuration, audit logs, gVisor isolation, authenticated ingress, and enforced egress. It still uses a single production host, has no formal uptime SLA, is not SOC 2 certified, and does not offer a HIPAA BAA or standard DPA.
KiwiClaw is not currently SOC 2 certified and does not claim HIPAA or GDPR compliance. Do not process PHI, and complete a legal and vendor-risk review before regulated use.
Customer-dedicated clusters, selectable regions, and contractual SLA guarantees are not generally available today. Contact the team for an accurate capability and gap review.
We will show the controls that are live and identify the gaps against your requirements.