Security & trust
Built to earn the access it asks for.
Demerzel sits close to your infrastructure, so it’s designed around clear, verifiable boundaries — not promises.
A read-only, outbound-only agent
One lightweight agent runs on your servers. It observes and summarizes only — no inbound port, no command channel, nothing to exploit as a foothold.
It collects metadata, never secrets
The agent reports operational posture — metrics, versions, service and certificate status. It never reads passwords, config files, environment variables or user accounts.
Canadian hosting, encrypted in transit
Your data is hosted in Canada (OVHcloud, Beauharnois, Québec). Everything moves over HTTPS; agents authenticate with a per-agent certificate (mTLS).
Your monitoring data has one processor
OVHcloud is the only party that touches your servers' monitoring data — no data brokers, no third parties. We use a privacy-first analytics tool for website and product usage only; it never sees your monitoring data.
Strict tenant isolation
Every request is scoped to one organization. There is no shared, cross-tenant view of data — ever.
Roles, audit trail & real deletion
Owner / admin / read-only roles enforced server-side, a complete activity log, and permanent deletion of your data on request.
Full technical detail lives in the security documentation.
Monitoring you can put in front of a security review.
Read-only by design, Canada-hosted, and yours to delete. See it for yourself.
14-day free trial · No credit card required