Today, we’re announcing an integration with the Claude Compliance API, bringing Claude Enterprise and Claude Platform activity directly into the Sumo Logic platform.
Enterprises are deploying Claude at scale, and Sumo Logic’s Intelligent Operations Platform is built to unify critical security and operational data across a complex environment, making us uniquely positioned to extend that same visibility to AI.
This integration brings AI activity into Sumo Logic’s real-time monitoring, detection, and response workflows, so organizations can govern Claude alongside every other enterprise application in their stack.
Bringing AI activity into your existing workflows
This integration gives security and compliance teams visibility into Claude usage activity directly within the Sumo Logic Intelligent Operations Platform. That means that teams can extend their existing monitoring, data loss prevention (DLP), retention, and audit capabilities to include Claude:
- Claude Enterprise: Access to activity logs (user logins, admin actions, settings, configuration changes)
- Claude Platform: Access to activity logs, such as admin and system events (e.g., member and workplace changes, API key creation, account settings), and resource events (e.g., file create/download, skill changes).
With this integration, your AI becomes fully observable, searchable, and governed, just like the rest of your environment.
Deploy Claude with confidence
By bringing Claude Enterprise and Claude Platform activity into Sumo Logic, organizations can transform AI governance into a transparent, enterprise-ready operation. Security, compliance, and DevOps teams gain real-time visibility and automated detection, investigation, and response capabilities within Sumo Logic without needing to build custom pipelines or adopt new tooling.
Claude activity now lives alongside logs, metrics, and security signals already in Sumo Logic. That means your existing workflows, such as real-time alerting, centralized analytics, dashboards, and retention policies, can immediately extend to AI. Sumo Logic Dojo AI agents further accelerate investigation and response, moving teams from reaction to readiness.
Key capabilities
High-velocity eDiscovery
Quickly identify specific user sessions and events using a high-fidelity activity feed to support legal or forensic analysis without disrupting production systems.
DLP integration
Track file upload and download events, as well as chat activity, to support data governance oversight. High-risk activity is surfaced immediately, enabling rapid response before issues escalate.
Continuous compliance and long-term auditability
Every action, from admin changes to key rotations, is logged with timestamps and IP-level detail in a searchable, long-term archive so you can maintain audit readiness and satisfy data protection requirements without manual effort. Dashboards can be exported as PDF reports for regulatory submission.
Identity and workspace governance
Track creation, rotation, and usage of API keys and admin keys, as well as workspace membership changes. Enforce least-privilege access and reduce your attack surface with lifecycle visibility.
Full-stack developer resource auditing
Track file uploads, downloads, and deletions via the Files API. Monitor skill and skill-version lifecycle events, including which users have enabled specific skills. Correlate every resource change and MCP server action back to the exact API key that performed it, ensuring every automated action is attributable and within policy.
Business impact
AI adoption only delivers value when it’s trusted, governed, and operationalized at scale. Without visibility and control, risk increases. By bringing Claude activity into Sumo Logic, organizations can confidently operationalize AI, turning compliance and security from blockers into enablers of business growth. Your team can:
- Accelerate AI adoption: Scale confidently with full visibility into how AI is being used across your organization.
- Reduce risk exposure: Detect and prevent sensitive data leaks and unauthorized access with real-time monitoring, out-of-the-box detection rules, and policy enforcement.
- Meet regulatory and data protection requirements: Maintain a comprehensive audit trail with precise accountability for every user and administrative action.
- Respond faster to incidents: Reduce investigation time from hours to seconds with automated eDiscovery, centralized visibility, and Sumo Logic Dojo AI agents.
AI compliance, without the complexity
The integration is available now through the Sumo Logic App Catalog.
Full setup documentation is available here. For additional support, contact your Sumo Logic account team.
