We understand that your database credentials are highly sensitive. Connecting requires us to store them, and we want to assure you we take this responsibility extremely seriously.

To safeguard your information, we utilize Infisical, a dedicated and highly secure secrets management platform designed specifically for handling sensitive data like API keys and database credentials.

Here's how we protect your credentials using best practices:

• Secure Storage with Infisical: Your credentials are not stored directly in our application databases but are managed securely within Infisical.
• Encryption: Credentials are encrypted both at rest (when stored in Infisical) and in transit (when communicated between our services and Infisical).
• Strict Access Control: Access to these credentials within our systems and Infisical is tightly controlled, audited, and limited only to the essential processes required to connect to your database and provide our service.
• Secure System-Level Key Rotation: We take extra precautions on our side to protect how our systems access those credentials. Specifically, we regularly rotate the internal access keys to your credentials — the secure secrets manager we use to store your credentials. This helps minimize risk in the event of a breach and ensures that even if a key were somehow compromised, it would quickly become invalid. It’s one of the ways we enforce strong operational security around your sensitive data.

Your trust is paramount. While we implement robust measures on our end, please continue to treat these credentials carefully yourself and avoid sharing them through insecure channels (like email or public chat).