PostgreSQL compliance

How self-hosted PostgreSQL deployments meet specific audit logging and access control requirements in PCI DSS and the HIPAA Security Rule.

PostgreSQL audit logging for PCI DSS requirement 10

Meeting PCI DSS requirement 10 for databases holding cardholder data: which events pgAudit and PostgreSQL logging must capture, the fields each entry needs, when database logging can be skipped, and 12-month retention.

PostgreSQL for HIPAA audit and access controls

Configuring PostgreSQL databases that hold ePHI to support HIPAA Security Rule access control and audit control standards: unique database roles, row-level security, pgAudit activity records and encryption decisions.

Talk to our team.

Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.

  • 30-minute call: free, with no obligation.
  • NDA on request: we can sign before you share details.
  • Clear next steps: a scope and plan after the call.