Platform

Your API keys would be sitting in our database, and you have to decide whether that's acceptable. The short version is that we can't read them. The key that decrypts your keys is derived from your vault password with scrypt. We never store that password, so there's no "forgot password" flow here, because there is nothing on our side to recover from. Lose it and the keys are gone, including for us. Status, the architecture write-up and a pre-signed DPA are linked below.

• Status, real-time platform health.
• Security review, email us for our encryption and vault architecture deck.
• DPA, request our pre-signed data-processing addendum.