February 2022 Summaries

Knock provides a flexible notifications infrastructure for developers, emphasizing visibility and observability through a built-in debugger and extensive API logging. To handle the vast amount of API logs efficiently, Knock uses AWS Kinesis for buffering and Postgres for storage. They faced challenges in filtering logs by endpoint due to the volume and complexity of API paths. Instead of adopting a dedicated log storage solution like ElasticSearch, they chose to keep things simple with Postgres, leveraging its LTree data type to manage and query hierarchical API paths efficiently. This approach allows Knock to perform index-optimized searches while maintaining the flexibility to migrate to a more specialized backend in the future. By converting API paths into LTrees, Knock can quickly normalize and index logs, facilitating efficient search queries and ensuring high performance despite the large scale of data.

Knock has achieved SOC 2 Type II compliance following an audit conducted from August to November 2021, marking a significant milestone in their commitment to data security, availability, and privacy. The company adopted Vanta as their compliance partner to automate and streamline the process, a marked improvement from previous experiences that required extensive manual effort and resources. This certification underscores Knock's dedication to security, which has been a priority from the company's inception, and the company plans to continue enhancing their security measures. Knock is open to sharing their insights and experiences with others in the industry, offering their report upon request and encouraging founders to reach out for guidance on undergoing SOC 2 compliance.