Sigilbase

If you run it, we support it.

Any system that keeps an audit trail or can send JSON becomes a stream in a chained, signed ledger, with a receipt for every collection and a declared gap for every interval nothing covers.

Start free Anything else, through a receiver

Cloud infrastructure

Control-plane audit trails, configuration snapshots and security findings from the clouds you build on.

  • AWS

    Audit logs, log files and configuration snapshots. First wave.

  • Google Cloud

    Audit logs and configuration snapshots. First wave.

  • Microsoft Azure

    Audit logs, delivered events, log files and configuration snapshots. First wave.

  • Cloudflare

    Audit logs, log files and configuration snapshots. Second wave.

  • Hetzner Cloud

    Audit logs and configuration snapshots. Second wave.

  • OVHcloud

    Audit logs, log files and configuration snapshots. Second wave.

  • Scaleway

    Audit logs. Second wave.

  • Akamai

    Audit logs. Later wave.

  • DigitalOcean

    Audit logs and configuration snapshots. Later wave.

  • Fastly

    Audit logs and configuration snapshots. Later wave.

  • Fly.io

    Audit logs. Later wave.

  • Heroku

    Audit logs. Later wave.

  • IBM Cloud

    Audit logs. Later wave.

  • IONOS Cloud

    Audit logs and configuration snapshots. Later wave.

  • Linode

    Audit logs. Later wave.

  • Netlify

    Audit logs and configuration snapshots. Later wave.

  • Oracle Cloud Infrastructure

    Audit logs and configuration snapshots. Later wave.

  • Vercel

    Audit logs and configuration snapshots. Later wave.

Containers, orchestration and infrastructure as code

Cluster audit, deployment and infrastructure-change evidence.

  • Amazon EKS

    Audit logs. With the AWS connector.

  • Azure AKS

    Audit logs. With the Microsoft Azure connector.

  • Google GKE

    Audit logs. With the Google Cloud connector.

  • HCP Terraform

    Audit logs and configuration snapshots. Second wave.

  • Kubernetes

    Delivered events, log files and forwarded logs. Second wave.

  • Argo CD

    Audit logs, delivered events and configuration snapshots. Later wave.

  • Docker Hub

    Audit logs. Later wave.

  • Flux

    Delivered events. Later wave.

  • Harbor

    Audit logs and forwarded logs. Later wave.

  • JFrog Artifactory

    Audit logs and forwarded logs. Later wave.

  • Pulumi Cloud

    Audit logs. Later wave.

  • Red Hat OpenShift

    Delivered events and forwarded logs. Later wave.

  • Sonatype Nexus

    Audit logs and forwarded logs. Later wave.

  • Spacelift

    Audit logs. Later wave.

Identity, SSO and directory

Who could sign in, who did, and what changed in the directory.

Password managers and secrets

Vault access and secret lifecycle events, never the secrets themselves.

HR, payroll and workforce

Joiners, movers and leavers, from the system of record for people.

  • BambooHR

    Audit logs and configuration snapshots. First wave.

  • HiBob

    Audit logs, delivered events and configuration snapshots. First wave.

  • Deel

    Delivered events and configuration snapshots. Second wave.

  • Personio

    Delivered events and configuration snapshots. Second wave.

  • Rippling

    Audit logs and configuration snapshots. Second wave.

  • Workday

    Audit logs, forwarded logs and configuration snapshots. Second wave.

  • ADP (Workforce Now)

    Audit logs and configuration snapshots. Later wave.

  • Breathe HR

    Configuration snapshots. Later wave.

  • CharlieHR

    Configuration snapshots. Later wave.

  • Employment Hero

    Configuration snapshots. Later wave.

  • Factorial

    Delivered events and configuration snapshots. Later wave.

  • Gusto

    Configuration snapshots. Later wave.

  • Oracle HCM

    Forwarded logs and configuration snapshots. Later wave.

  • Remote.com

    Delivered events and configuration snapshots. Later wave.

  • Sage HR

    Configuration snapshots. Later wave.

  • Sage People

    Configuration snapshots. Later wave.

  • SAP SuccessFactors

    Audit logs and configuration snapshots. Later wave.

Code hosting, CI/CD and software supply chain

Who changed the code, who approved it, and what shipped.

  • GitHub

    Audit logs, delivered events and configuration snapshots. First wave.

  • GitHub Actions

    Audit logs and configuration snapshots. With the GitHub connector.

  • GitLab

    Audit logs, delivered events and configuration snapshots. First wave.

  • GitLab CI

    Audit logs. With the GitLab connector.

  • Azure DevOps

    Audit logs, delivered events and configuration snapshots. Second wave.

  • Bitbucket Cloud

    Audit logs, delivered events and configuration snapshots. Second wave.

  • GitHub Enterprise Server

    Audit logs and forwarded logs. Second wave.

  • LaunchDarkly

    Audit logs and configuration snapshots. Second wave.

  • Snyk

    Audit logs and configuration snapshots. Second wave.

  • Bitbucket Data Center

    Audit logs and forwarded logs. Later wave.

  • Buildkite

    Audit logs and delivered events. Later wave.

  • CircleCI

    Audit logs and configuration snapshots. Later wave.

  • Harness

    Audit logs. Later wave.

  • Jenkins

    Forwarded logs. Later wave.

  • Mend

    Audit logs and configuration snapshots. Later wave.

  • Octopus Deploy

    Audit logs and configuration snapshots. Later wave.

  • Sigstore and in-toto attestations

    Delivered events and configuration snapshots. Later wave.

  • Socket

    Audit logs and configuration snapshots. Later wave.

  • Sonatype Lifecycle

    Audit logs and configuration snapshots. Later wave.

  • TeamCity

    Audit logs. Later wave.

  • Forgejo

    Delivered events and forwarded logs. Through a receiver.

  • Gitea

    Delivered events and forwarded logs. Through a receiver.

  • Package registries

    Audit logs. Through a receiver.

Endpoint, MDM and EDR

Device inventory, compliance state and detections.

Productivity, collaboration and business SaaS

Administrative and access audit trails of the tools your company runs on.

  • Atlassian Cloud

    Audit logs and configuration snapshots. First wave.

  • Microsoft 365

    Audit logs and configuration snapshots. First wave.

  • Microsoft Teams

    Audit logs. With the Microsoft 365 connector.

  • Asana

    Audit logs and configuration snapshots. Second wave.

  • Box

    Audit logs and configuration snapshots. Second wave.

  • DocuSign

    Audit logs. Second wave.

  • Dropbox Business

    Audit logs and configuration snapshots. Second wave.

  • Salesforce

    Audit logs and configuration snapshots. Second wave.

  • Slack

    Audit logs and configuration snapshots. Second wave.

  • Zendesk

    Audit logs and configuration snapshots. Second wave.

  • Zoom

    Audit logs and configuration snapshots. Second wave.

  • Adobe Acrobat Sign

    Audit logs and delivered events. Later wave.

  • Adobe Admin Console

    Audit logs. Later wave.

  • Airtable

    Audit logs. Later wave.

  • ClickUp

    Audit logs. Later wave.

  • Egnyte

    Audit logs. Later wave.

  • Figma

    Audit logs. Later wave.

  • Freshdesk

    Audit logs. Later wave.

  • HubSpot

    Audit logs and configuration snapshots. Later wave.

  • Intercom

    Audit logs and configuration snapshots. Later wave.

  • Linear

    Audit logs and delivered events. Later wave.

  • Miro

    Audit logs. Later wave.

  • monday.com

    Audit logs. Later wave.

  • Notion

    Audit logs and configuration snapshots. Later wave.

  • ShareFile

    Audit logs. Later wave.

  • Smartsheet

    Audit logs. Later wave.

  • Trello

    Audit logs. Later wave.

  • Canva

    Audit logs. Through a receiver.

Databases, warehouses and data platforms

Who queried, changed or granted access to data. Collected by a collector you run, with field allow-lists.

Payments, finance and accounting

Operational and administrative events from payment and finance systems. Never cardholder data.

  • Adyen

    Audit logs and delivered events. Second wave.

  • GoCardless

    Audit logs and delivered events. Second wave.

  • Paddle

    Audit logs and delivered events. Second wave.

  • QuickBooks Online

    Audit logs and configuration snapshots. Second wave.

  • Stripe

    Audit logs, delivered events and configuration snapshots. Second wave.

  • Xero

    Audit logs and configuration snapshots. Second wave.

  • Banking Circle

    Audit logs and delivered events. Later wave.

  • Braintree

    Audit logs and delivered events. Later wave.

  • Brex

    Audit logs and configuration snapshots. Later wave.

  • Chargebee

    Audit logs and delivered events. Later wave.

  • Checkout.com

    Audit logs and delivered events. Later wave.

  • ClearBank

    Audit logs and delivered events. Later wave.

  • Expensify

    Audit logs and configuration snapshots. Later wave.

  • FreeAgent

    Audit logs and configuration snapshots. Later wave.

  • Modulr

    Audit logs and delivered events. Later wave.

  • Mollie

    Audit logs and delivered events. Later wave.

  • NetSuite

    Audit logs and configuration snapshots. Later wave.

  • Open Banking account information

    Configuration snapshots. Later wave.

  • PayPal

    Audit logs and delivered events. Later wave.

  • Pleo

    Audit logs and configuration snapshots. Later wave.

  • Ramp

    Audit logs and configuration snapshots. Later wave.

  • Recurly

    Audit logs and delivered events. Later wave.

  • Sage Business Cloud

    Audit logs. Later wave.

  • Sage Intacct

    Audit logs. Later wave.

  • Soldo

    Audit logs and configuration snapshots. Later wave.

  • Spendesk

    Audit logs and configuration snapshots. Later wave.

  • Square

    Audit logs and delivered events. Later wave.

  • Fiserv

    Forwarded logs. Through a receiver.

  • Global Payments

    Forwarded logs. Through a receiver.

  • Worldpay

    Forwarded logs. Through a receiver.

ITSM, incident, change and on-call

Change approvals, incident timelines and on-call records.

AI platforms and model operations

Organisation audit logs, usage and model lifecycle events from AI platforms.

Security operations and observability

Audit trails and findings from the tools that watch everything else.

Network and perimeter

Firewall, VPN and network configuration changes.

Physical security and facilities

Door access events and visitor records.

Backup, resilience and business continuity

Backup and restore job evidence, and restore-test attestations.

  • AWS Backup

    Audit logs and configuration snapshots. With the AWS connector.

  • Restore-test attestations

    Delivered events. Second wave.

  • Azure Backup

    Audit logs. With the Microsoft Azure connector.

  • Cohesity

    Audit logs and configuration snapshots. Later wave.

  • Druva

    Audit logs and configuration snapshots. Later wave.

  • Google Cloud Backup and DR

    Audit logs. With the Google Cloud connector.

  • Rubrik

    Audit logs and configuration snapshots. Later wave.

  • Veeam

    Audit logs and forwarded logs. Later wave.

  • Backblaze B2

    Audit logs. Through a receiver.

  • Wasabi

    Audit logs. Through a receiver.

Communications and telephony

Account and configuration audit trails of communication platforms.

  • Twilio

    Audit logs. Later wave.

  • 8x8

    Audit logs. Through a receiver.

  • Aircall

    Audit logs. Through a receiver.

  • Bird (MessageBird)

    Audit logs. Through a receiver.

  • Mailgun

    Audit logs. Through a receiver.

  • Postmark

    Audit logs. Through a receiver.

  • RingCentral

    Audit logs. Through a receiver.

  • SendGrid

    Audit logs. Through a receiver.

  • Sinch

    Audit logs. Through a receiver.

  • Vonage

    Audit logs. Through a receiver.

Application frameworks

Forward the audit trail your application already keeps, through a small open-source bridge for its framework.

Receivers and the API

The paths that take any source: point an existing forwarder at Sigilbase, or send events yourself.

Not on the list?

The list is where connectors are going, not the limit of what can be sealed. Anything that can make an HTTP request writes to the events API today, and OpenTelemetry exporters already send to the OTLP endpoint. Receivers for what existing forwarders emit, HTTPS, syslog, a Splunk HTTP Event Collector, a bucket, are in the first waves.

Tell us what you run and it goes on the list with a status, like everything else here.

What stays the same

  • The record kept as the source gave it, with its hash
  • A receipt for every collection
  • A declared gap for every interval nothing covers
  • A daily settlement once late records can no longer arrive
  • Evidence verified offline, without an account

Start recording provable history

Chained, sealed, independently verifiable audit logs, from the first event. Free while Sigilbase is in beta.

Start free

Questions first? Write to hello@sigilbase.io.

Privacy

This site runs no analytics and no trackers.

The site itself collects nothing. If you create a Sigilbase account, the data that involves is described in the privacy policy.

To have your email removed, contact hello@sigilbase.io.

Read the full privacy policy.

Last updated July 2026.