SigNoz
Connect SigNoz to Safeguard: what it provides, how to set it up, and the frameworks it provides evidence for.
Connect SigNoz to collect observability evidence with automated compliance tests, switched on per workspace.
Step-by-step guide: Connect SigNoz.
| Category | Observability |
| Connect with | API token |
| What a connection produces | Automated compliance tests |
| SigNoz's guide | signoz.io |
Connect with an API token
-
In SigNoz:
- In SigNoz, go to Settings › Service Accounts and click New Service Account.
- Enter a name (lowercase letters, numbers and hyphens, up to 50 characters) and click Create.
- Click the service account to open it, and in the Overview tab use the Roles dropdown to assign a role, then click Save.
- Switch to the Keys tab, click Add Key, enter a descriptive name, optionally set an expiration date, and click Create.
- Copy the key value now; it is shown only once at creation time.
Where to find the other values:
- Base URL: The https address of your SigNoz instance.
SigNoz shows the secret only once, so copy it before you leave the page.
SigNoz's public documentation does not cover every step.
Source: signoz.io, checked 2026-10-07.
The permissions Safeguard needs:
SigNoz-Viewer,SigNoz-Admin (optional elevated grant, for the account tests). A service account key with SigNoz-Viewer verifies the connection and runs the alert and log-retention tests. The account tests (accounts linked to people, leavers, admin count) list users and roles, which only the SigNoz-Admin role can do: custom roles cannot grant user management. SigNoz-Admin also grants write, so give it as an elevated grant, or keep the key as Viewer and attest those tests. -
On Compliance › Connectors, open SigNoz, click Connect, choose API token and fill in:
Field What to enter Base URL Required. Your own server: an https address reachable from the internet. API key Required. Stored encrypted and never shown again. -
Click Connect with token.
Frameworks
Safeguard's automated tests read SigNoz and map to the controls below. When a test passes, the result is evidence toward each control it maps to, in every framework listed. It is evidence toward a control, not proof that the control is met on its own.
| Framework | Evidence | Controls | Tests |
|---|---|---|---|
| SOC2 | Automated tests | CC6.1, CC6.2, CC6.3, CC7.2 | 7 |
| ISO/IEC 27001 | Automated tests | A.5.16, A.5.17, A.5.18, A.6.5, A.8.2, A.8.15, A.8.16 | 7 |
| HIPAA Security Rule | Automated tests | 164.308(a)(3), 164.308(a)(4), 164.308(a)(5), 164.312(b) | 7 |
| PCI DSS | Automated tests | 7.2.2, 7.2.4, 8.2.5, 8.6.3, 10.4.1, 10.5.1 | 7 |
| NIST CSF 2.0 | Automated tests | DE.CM-01, PR.AA-01, PR.AA-05, PR.PS-04 | 7 |
These tests are switched on per workspace by the Safeguard team.
Related
- Observability connectors
- Compliance connectors: how connecting works, card statuses and multiple accounts
- Connector setup reference: every connector in one table
- Frameworks and connectors: how connectors provide evidence for frameworks