[benthehenten]

I'm on the LogRocket team.

Your concern is fair, though many modern analytics tools can capture PII if not properly configured. It is important when using any such tools, including LogRocket, that developers understand the scope of the data collected and properly censor things like SSN, Credit Cards, or health data.

Some of our more security-conscious customers also just run LogRocket on their own servers with our self-hosted version. In this case, the script becomes first party, and they can configure behavior where no data leaves the client unless a user specifically gives permission.

[cl0rkster]

That is awesome to hear that there is a self-hosted version. I was reading through your docs hoping to find something like that. Is there somewhere on your site that I missed which gives more details about this?

[benthehenten]

So far, we've worked with a few larger customers to run LogRocket on their own infrastructure (or their own AWS environment in some cases), but we haven't publicized the specifics yet.

If you shoot me an email (ben at logrocket) I'd be happy to discuss in more detail :)