Modern SaaS teams often struggle to balance deep observability with tenant isolation and compliance. A recent DEV Community post details how SigNoz and OneUptime have collaboratively built a multi-tenant monitoring platform addressing these challenges. The platform routes logs, metrics, and traces to isolated stacks, ensuring strong security controls and compliance with SOC 2 and ISO 27001 practices. This approach gives each customer a dedicated monitoring experience while maintaining a lean operational footprint.

The architecture employs a hub-and-spoke model, where a central monitoring VM hosts the observability stack. Each tenant has either a fully isolated SigNoz stack or a shared stack with strict routing based on a tenant identifier. This design offers consistency in the ingestion pipeline and allows for isolation by default. The platform uses Nginx maps to route traffic by hostname, providing clean DNS-based routing while maintaining a single IP address. Security is hardened with SSH key-based access, minimal inbound ports, and Docker Compose for immutable service layout.

For tenant segregation, the platform supports two modes: full isolation per tenant and logical isolation on a shared stack. Full isolation offers the strongest data isolation, while logical isolation is suitable for smaller tenants. This flexibility ensures that compliance-focused clients receive the necessary isolation, while operational processes remain standardized. The platform also includes rigorous verification and observability QA processes, ensuring the pipeline's reliability and performance.

The architecture provides a repeatable, audited deployment flow suitable for SOC 2 and ISO 27001 requirements. It splits configuration by responsibility, allowing for easy reproducibility and scalability. This setup ensures that new VMs can be quickly provisioned and configured, maintaining the operational efficiency needed for growing SaaS teams.