Security

How PatchMap handles your data.

UK data residency, single-tenant isolation, append-only audit, daily backups, predictable releases. What ships today, and what's on the roadmap for v1.0.

Data residency

PatchMap Cloud runs on UK-based dedicated infrastructure. Single region, no cross-border replication. Your data stays in the UK, which is the whole point.

Tenancy isolation

Every customer gets a dedicated, single-tenant Docker stack with their own database and their own application, isolated end-to-end. No shared schema, no noisy neighbours, no surprises.

Audit logs

Every privileged action lands in an append-only audit log with actor identity, IP, user agent, before/after diff, and UTC timestamp. Today the writers cover SSO configuration changes (sso.oidc, sso.saml) and admin device-template edits (device_template create / update / delete).

Roadmap · An admin-facing audit-log viewer lands with the v1.0 Settings Hub release.

Backups + recovery

Daily backups, retained on rotation, restoration tested end-to-end.

Roadmap · A self-serve backup and restore admin UI lands with v1.0.

Update cadence

We manage upgrades for you. Every release ships with a full changelog and rolls out on a predictable cadence, tested before it reaches your instance, with no surprise breaking changes.