Security & compliance

Evidence-grade credential governance

Demonstrate who has access to what, when access changed, and how secrets leave the platform — without spreadsheets or screenshots.

Audit trail you can hand to a reviewer

Every user and admin action is recorded in an immutable audit trail. Export it as evidence for internal review or external assessment.

Export encryption governance

There is no unencrypted export pathway. Exports are encrypted, scoped to roles, and recorded in the audit trail.

BYOK framework for key custody

Customer-managed keys are governed through the BYOK framework for AWS KMS, Azure Key Vault, and Google Cloud KMS. BYOK is available as a framework with the Enterprise plan; runtime maturity is documented in the security overview.