I’ve been reading a lot of the discussions here about Claw as a customer feedback platform, and one thing keeps coming up: the security trade-offs between the managed SaaS version and the self-hosted option.
We’re starting to evaluate Claw for our team, and security is a non-negotiable for our compliance requirements. From what I’ve gathered, the managed version boasts SOC 2 compliance and handles all patching, but you’re trusting their cloud environment entirely. The self-hosted version puts the infrastructure burden on us, but we control the data location and access logs.
My specific questions are for those who have gone through this evaluation:
1. For the managed version, what level of detail were you able to get about their intrusion detection or backup encryption methods? Was their security appendix comprehensive?
2. For self-hosted, what was the actual overhead for maintaining security patches and database hardening? Did you need a dedicated infra person, or could your existing team handle it alongside the application itself?
I’m trying to move beyond the marketing claims to the practical, ongoing effort and risk for each model. Any insights from your RFPs or security questionnaires would be really helpful.