Datadog
Ingest traces and metrics for every request and optionally update monitors after certificates are validated.
Monthly verification • last run September 2025
Modes & scopes
Modes
- Read-first
- Write-gated (monitor updates)
Scopes
- API key with read metrics scope
- Application key for monitor management (optional)
Runbook highlights
Connection modes
PrivateLink ingestion endpoints; API keys stored in your secrets manager.
Learning Controls
Evaluation contracts check latency and cost telemetry before automations change monitors.
Evidence
Certificates capture monitor IDs, dashboard URLs, and OpenTelemetry span IDs.
Sample automations & evidence
Sample automations
- Correlate certificate IDs with latency regressions
- Open change-freeze alert when drift crosses threshold
Action Certificate mapping
Every certificate embeds connector identifiers, residency policy hashes, and Learning Control references so downstream systems can verify scope before allowing writes. Export verification logs to Splunk/Datadog using thetrustplane.certificate_id attribute.
Need a signed runbook?
Request a signed copy of this connector runbook, DPIA, or sub-processor alignment via the security contact form. We respond within one business day and can include environment-specific attestations.
Contact security