Zero Knowledge Architecture

TRUST NO ONE.

Not even us. Your secrets are encrypted on your device before they ever touch our network.

Envelope Encryption

We use a unique hybrid encryption model that ensures you maintain full ownership of your keys while enabling secure team sharing.

Client-Side Generation

Keys differ per device and never leave your browser unencrypted.

Envelope Wrapping

Project keys are wrapped with your public key. Only you can unwrap them.

Zero Knowledge Proof

We verify your identity using secure SRP-6a protocol without ever seeing your password.

Security Seal
LOCKED
AES-256-GCM
ENCRYPTED

What We Can See

Transparency is key to trust.

Visible Metadata

  • User Email & ID
  • Organization Names
  • Project & Environment Names
  • Subscription Status
  • Encrypted Blobs (Gibberish)

Totally Invisible

  • Your 2FA Codes
  • Decrypted Key Values
  • Your Master Password
  • Private Wrapping Keys
  • Raw ENV File Contents

Independently Audited

We believe trust is earned. Our proprietary cryptographic core undergoes rigorous quarterly audits by top-tier security firms. Your data security is our intellectual property and priority.