diff --git a/assistant/src/util/logger.ts b/assistant/src/util/logger.ts
index 63e64db3123..67311e175e7 100644
--- a/assistant/src/util/logger.ts
+++ b/assistant/src/util/logger.ts
@@ -66,7 +66,7 @@ function buildRotatingLogger(config: LogFileConfig): pino.Logger {
 
   const today = formatDate(new Date());
   const filePath = logFilePathForDate(config.dir, new Date());
-  const fileStream = pino.destination({ dest: filePath, sync: false, mkdir: true });
+  const fileStream = pino.destination({ dest: filePath, sync: false, mkdir: true, mode: 0o600 });
 
   activeLogDate = today;
   activeLogFileConfig = config;
@@ -130,7 +130,7 @@ function getRootLogger(): pino.Logger {
     }
 
     try {
-      const fileStream = pino.destination({ dest: getLogPath(), sync: false, mkdir: true });
+      const fileStream = pino.destination({ dest: getLogPath(), sync: false, mkdir: true, mode: 0o600 });
 
       if (getDebugMode()) {
         const prettyStream = pinoPretty({ destination: 2 });
diff --git a/gateway/src/logger.ts b/gateway/src/logger.ts
index 6bc2abd9c7c..00dd318d36a 100644
--- a/gateway/src/logger.ts
+++ b/gateway/src/logger.ts
@@ -63,7 +63,7 @@ function buildLogger(config: LogFileConfig | null): pino.Logger {
 
   const today = formatDate(new Date());
   const filePath = logFilePathForDate(config.dir, new Date());
-  const fileStream = pino.destination({ dest: filePath, sync: false, mkdir: true });
+  const fileStream = pino.destination({ dest: filePath, sync: false, mkdir: true, mode: 0o600 });
 
   activeLogDate = today;
   activeConfig = config;