Cloud Features

Kanoniv Cloud provides advanced capabilities for compliance, governance, multi-tenant deployments, and security.

Overview

Governance & Compliance

Feature	Description
Compliance & PII Masking	Regulatory frameworks (HIPAA, GDPR, CCPA, SOC 2) with automatic PII masking
Audit Logs	Full match trail with rule traces, decisions, and conflict resolution
Source Freshness	Detect stale data sources before reconciliation
Entity Hierarchy	Parent-child relationships with field inheritance
Spec Governance	YAML spec as single source of truth for all policy

Infrastructure

Feature	Description
Multi-Tenant	Hierarchical tenant isolation with RLS
SSO & SCIM	SAML 2.0 / OIDC single sign-on
SIEM	Real-time audit streaming

Cloud Architecture

┌─────────────────────────────────────────────────────────────┐
│                     Platform Owner                           │
│              (Manages all organizations)                     │
└──────────────────────────┬──────────────────────────────────┘
                           │
         ┌─────────────────┼─────────────────┐
         ▼                 ▼                 ▼
┌─────────────────┐ ┌─────────────────┐ ┌─────────────────┐
│   Org: Acme     │ │  Org: BigCorp   │ │  Org: StartupX  │
│   (Tenant A)    │ │   (Tenant B)    │ │   (Tenant C)    │
├─────────────────┤ ├─────────────────┤ ├─────────────────┤
│ ├─ LOB: Sales   │ │ ├─ LOB: EMEA    │ │ (Single tenant) │
│ ├─ LOB: Support │ │ ├─ LOB: APAC    │ │                 │
│ └─ LOB: Finance │ │ └─ LOB: Americas│ │                 │
└─────────────────┘ └─────────────────┘ └─────────────────┘

SDK Access

Cloud features are available to all SDK clients. No special SDK configuration is required; Cloud capabilities are controlled by your API key's permissions and your tenant's plan.

# Cloud features are available to all SDK clients
from kanoniv.client import KanonivClient

client = KanonivClient(api_key="kn_...", base_url="https://api.kanoniv.com")

Data Isolation

All tenant data is isolated using:

1. Row-Level Security (RLS). PostgreSQL policies enforce tenant boundaries
2. Application-Level Checks. Every query includes tenant_id
3. Encryption at Rest. All data encrypted at rest via AWS RDS

Compliance Readiness

Standard	Support
SOC 2 Type II	Audit log, access controls
GDPR	Retention policies, data export
HIPAA	Encryption, access logging
CCPA	Data deletion, consent tracking

Getting Cloud Access

Contact us for Cloud pricing and features:

• Email: [email protected]
• Schedule a demo: calendly.com/kanoniv