Volidator

Zero-knowledge audit logging SDK for B2B SaaS. Encrypt logs client-side. Your infrastructure never reads them.

Getting Started

• Quickstart: Install, initialize, and send a first encrypted audit log in under 5 minutes.

Concepts

• Overview: What Volidator is and how its three core concepts fit together.
• Zero-Knowledge Architecture: How payloads are encrypted before leaving your server.
• Blind Indexes: How encrypted logs remain searchable using HMAC-SHA256 tokens.
• Key Isolation: How the AES decryption key is kept out of the server using the URL hash fragment.

Guides

• Installation: Full constructor options, environment variables, and connection verification.
• Telemetry: Configuring IP, user-agent, and location collection with presets and per-log overrides.
• PII Redaction: Scrubbing sensitive fields before encryption for HIPAA and GDPR compliance.
• Embedding the Dashboard: Generating a signed embed token and rendering the audit trail iframe.

Reference

• VolidatorClient: Constructor config and all available options.
• log(): Method reference for sending encrypted audit events.
• generateEmbedToken(): Method reference for signing embed JWTs.
• extractContext(): Static method for extracting telemetry from HTTP request objects.
• Telemetry Presets: Field-by-field comparison of strict, standard, and full presets.

Self-Hosting

• Overview: Service architecture and deployment order.
• Ingestion Worker: Deploying the Hono ingestion worker to Cloudflare Workers.
• Management Worker: Deploying the management worker for project and API key provisioning.
• Database Setup: D1 database initialization and Drizzle migrations.