Run Claro entirely on your own infrastructure, with data that never has to leave

For banks, insurers, and government agencies, where employee data can be hosted is often as important as what a platform does with it. Claro deploys as a complete Docker Compose stack covering the application, PostgreSQL, Redis, and MinIO, so the entire platform, including any object storage for templates, evidence packages, and reports, can run inside your own network with no required third-party data egress. Every table carries row-level tenant isolation, and personally identifiable fields like email addresses are encrypted at rest with AES-256-GCM using a per-tenant data encryption key, with blind indexes so encrypted fields like email can still be searched without ever decrypting the whole column.

Data subject requests are handled two ways, matched to the scope of the request. Crypto-erasure deletes an entire tenant's encryption key, permanently rendering all of that tenant's PII unreadable without touching a single row, for whole-tenant erasure scenarios. Field-level user erasure anonymizes a single user's PII, replacing their email with an encrypted sentinel and nulling other personal fields while leaving a tombstone timestamp, for individual erasure requests. A configurable data retention policy enforces how long data is kept per tenant, run by a scheduled background job rather than a manual cleanup task, and the key provider itself is pluggable, so on-premise deployments manage their own encryption keys via environment variables rather than depending on a cloud KMS.