Security & compliance
Evidence-grade credential governance
Demonstrate who has access to what, when access changed, and how secrets leave the platform — without spreadsheets or screenshots.
Audit trail you can hand to a reviewer
Every user and admin action is recorded in an immutable audit trail. Export it as evidence for internal review or external assessment.
Export encryption governance
There is no unencrypted export pathway. Exports are encrypted, scoped to roles, and recorded in the audit trail.
BYOK framework for key custody
Customer-managed keys are governed through the BYOK framework for AWS KMS, Azure Key Vault, and Google Cloud KMS. BYOK is available as a framework with the Enterprise plan; runtime maturity is documented in the security overview.