---
title: "Natalia On-Premise Security - RFP-ready architecture"
description: "Natalia On-Premise security: GDPR by design, encryption, 4-role RBAC, immutable audit log, NIST SP 800-53 / ISO 27001 / ANSSI."
url: https://getnatalia.com/en/natalia-analytics-on-premise/security-on-premise
lang: en
---

[Home](https://getnatalia.com/en/) / [Documentation](https://getnatalia.com/en/documentation) / [On-Premise](https://getnatalia.com/en/natalia-analytics-on-premise) / Security

# Natalia On-Premise Security

Architecture designed to pass a fast CISO audit in Strict mode. NIST SP 800-53 / ISO 27001 / ANSSI referenced.

✅ No outbound connectivity (Strict mode) ✅ GDPR by design ✅ Encrypted phone numbers, audited access ✅ Immutable audit log ✅ RBAC (4 roles) ✅ At-rest + in-transit encryption ⏳ SOC 2 (roadmap) ⏳ ISO 27001 (roadmap)

## 3 contractual modes — summary

Security guarantees depend on the contractual mode selected at installation. Full reference: [contractual modes matrix](https://getnatalia.com/en/natalia-analytics-on-premise/contractual-modes).

## Disconnected architecture (Strict mode)

-   → No outbound connectivity required for nominal operation.
-   → Data processed and stored exclusively on your infrastructure.
-   → Local logs only.
-   → No Natalia sub-processor.
-   → No GDPR art.28 DPA to sign.

## Encryption

### At-rest

Industry-standard encryption (NIST SP 800-175B algorithms) applied to configuration and datastore on the appliance.

### In-transit

TLS 1.2+, customer-provided or self-signed certificates for the local web UI.

### PII encryption

Column-level encryption (industry-standard encryption, per-tenant key) for phone numbers. Numbers are displayed masked; no interface returns the full number. Search is performed on a non-reversible fingerprint, never on the plaintext number.

## RBAC — 4 roles

### Viewer

Read-only analytics dashboard.

### Admin

Configuration and export.

### Auditor

Read-only access to the audit log.

### Integrator

License management. No CDR access.

## Authentication & failed-login handling

Authentication is local. Failed logins are surfaced explicitly to the operator.

-   → Robust password hashing (OWASP recommendations).
-   → No silent failure: each error is visible to the operator.

![Administrator login screen showing an incorrect-password error message](https://getnatalia.com/en/ova-agent-login-error.5df2e093.png)

Failed login is reported explicitly.

## Immutable audit log

-   → Every sensitive action is logged with its timestamp.
-   → Cryptographic integrity verification via hash chain.
-   → Available to auditors (Auditor role, read-only).
-   → Configurable retention (default: 3 years).

## License & integrity verification

-   → Local cryptographic license verification (Ed25519, NIST FIPS 186-5).
-   → No network communication required for validation.
-   → Post-expiry grace period (preventive alert before lockout).
-   → Clock-tampering / rollback detection.

## VM hardening

-   → Minimalist hardened VM image (CIS Benchmark Level 1).
-   → Process confinement: no privilege escalation, read-only system, isolated services.
-   → No user shell, administration via serial console + web UI.

## Reversibility / portability

-   → Standard CDR export (CSV, JSON).
-   → Standard SQL dump.
-   → Portable OVA across hypervisors.

## GDPR art.17 — right to erasure

-   → Selective erasure procedure by extension (cascading on all associated CDRs).
-   → Erasure certificate issued.

## RFP appendix

-   → Pre-filled CISO questionnaire (on request under NDA, CAIQ-Lite / SIG-Lite format).
-   → Editor letter (CVE disclosure commitment, security support, CycloneDX SBOM on request).
-   → Frameworks: NIST SP 800-53 Rev.5 (AC/AU/SC/IR), ISO 27001:2022 Annex A, ANSSI hygiene guide.

Trade secret notice

The selection, organization and presentation of the information contained in this documentation constitute a proprietary asset of Natalia. The precise internal architecture (software versions, implementation choices, data schemas) is a trade secret under article L. 151-1 of the French Commercial Code and is not publicly disclosed. Post-installation details are governed by the signed proprietary license. Full CISO audit available under NDA — contact [security@getnatalia.com](mailto:security@getnatalia.com).

Last updated : October 5, 2026

[Suggest an edit](mailto:doc@getnatalia.com?subject=Doc%20edit%3A%20natalia-analytics-on-premise%2Fsecurity-on-premise)