LinkMeshObservabilityCompliance
Monitoring → Observability
linkmesh.io
Regulated environments buy evidence, not dashboards. What actually changes when monitoring becomes observability — and what a FINMA audit asks for.
Philippe Braxmeier6 min readLinkMeshPhilippe Braxmeier6 min read
LinkMeshOpenTelemetryCompliance
Regulated Kubernetes
linkmesh.io
Pod logs carry PII, namespaces are tenants, and the audit log is evidence. What changes when a cluster's telemetry has to survive a FINMA or ISO review.
Roman Hüsler6 min read
LinkMeshComplianceGovernance
Digital Sovereignty
linkmesh.io
Data residency is not sovereignty. Who can compel access to your telemetry, who operates the control plane, and how to keep the answer yours.
Philippe Braxmeier6 min read
LinkMeshComplianceTelemetry Pipelines
Sovereign Telemetry Architecture
linkmesh.io
A reference architecture for telemetry under revDSG and FINMA: classify at the edge, a Swiss gateway tier, split destinations, a control plane you host.
Philippe Braxmeier7 min read
LinkMeshComplianceGovernance
PII vs CID
linkmesh.io
PII and client-identifying data are different legal categories. No scanner reliably finds the second — classify before data leaves the network.
Philippe Braxmeier10 min read
LinkMeshOpenTelemetryCompliance
Secrets in Collector Config
linkmesh.io
Keep credentials out of committed Collector config: env vars, file substitution, Kubernetes Secrets, Vault — and how to rotate without downtime.
Roman Hüsler10 min read
LinkMeshComplianceObservability
Masking PII in Logs
linkmesh.io
Mask PII in-pipeline before telemetry crosses your network boundary — attribute deletion, regex masking, and hashing that preserves correlation.
Roman Hüsler6 min read