Experience analytics your security team approves
Zero-knowledge by architecture. Enterprise by default. The security, privacy, and governance controls your team needs — without compromising depth.
PII that physically cannot leak
Most tools capture everything and redact later. PeekHive redacts on the device, before transmission — so raw PII never reaches our network, servers, or storage. It's not a setting; it's the architecture.
Capture on device
The tracker serializes the DOM and interactions locally, inside a Web Worker.
Mask before send
Sensitive fields, keystrokes, and PCI/SSN patterns are redacted to ••• on-device.
Store sanitized
Only masked, compressed telemetry is transmitted over TLS 1.3 and stored.
Built for regulated industries
The certifications and controls your auditors expect — and the architecture that makes them easy to pass.
SOC 2 Type II
Independently audited security, availability, and confidentiality controls.
GDPR & CCPA
Right-to-be-forgotten API, consent hooks, and regional data residency.
HIPAA
BAAs available; PHI is visually redacted on-device, always.
TLS 1.3 everywhere
All data encrypted in transit and at rest. No raw PII to encrypt anyway.
Control who sees what
Session replay is powerful and sensitive. PeekHive gives you the granular controls to use it responsibly.
SSO / SAML
Connect Okta, Azure AD, Google, or any SAML IdP for one-click sign-in.
RBAC
Restrict sensitive replay data to the right roles while opening heatmaps to marketing.
Audit logs
Full visibility into who viewed which session, and when — exportable on demand.
SCIM & provisioning
Automated user lifecycle, IP allowlisting, and enforced session policies.
Engineered for global, high-traffic products
A Go ingestion edge, NATS/Kafka streaming backbone, and a ClickHouse OLAP store purpose-built for petabyte-scale analytics. Real-time live view scales to a million concurrent sessions without breaking a sweat.
- Global edge regions
- Data residency pinning
- Horizontal sharding
- Graceful degradation
Enterprise, answered
SOC 2 Type II, GDPR, and CCPA, with HIPAA BAAs available on Enterprise. Our zero-knowledge masking, regional data residency, and right-to-be-forgotten API are built for regulated industries.
Bring PeekHive to your security review
Get a tailored demo, security documentation, and a deployment plan that fits your compliance requirements.