Enterprise-grade security,
user-friendly simplicity.

env51 employs bank-grade security with AES-256 encryption at rest and in transit. We use a zero-trust architecture, ensuring secrets are encrypted before leaving your device. Our infrastructure is SOC2 compliant ready, and we conduct regular security audits. For on-premise deployments, you maintain complete control over your infrastructure and encryption keys.

You can store any type of sensitive data: API keys, database credentials, OAuth tokens, SSH keys, certificates, encryption keys, and any other environment variables. env51 supports key-value pairs, files, and structured data. Each secret can be organized into collections and vaults for easy management across different environments (development, staging, production).

env51 uses role-based access control (RBAC) with three primary roles: Admin (full access), Editor (can create/modify secrets), and Viewer (read-only access). You can assign permissions at the vault, collection, or individual secret level. All access is logged in our comprehensive audit trail, showing who accessed what and when. OAuth/SSO integration ensures secure authentication.

Yes! env51 is designed to help you meet compliance requirements. Our cloud offering is SOC2 compliant ready, and our architecture supports GDPR and HIPAA requirements. We provide comprehensive audit logs, data encryption, access controls, and data residency options. For specific compliance needs, our on-premise deployment gives you complete control over data location and handling.

For cloud deployments, we offer account recovery through verified email and admin override processes. For on-premise installations, you maintain full control and can implement your own recovery procedures. We recommend maintaining multiple admin accounts and using OAuth/SSO integration for centralized access management. Our support team is available to assist with account recovery processes.

Absolutely! We provide migration tools and documentation for importing secrets from popular platforms and other secret management solutions. Our API supports bulk import operations, and our team can assist with large-scale migrations. We also offer professional services for enterprise migration projects.

We offer demo sessions where you can explore all features of env51. Contact our sales team to schedule a personalized demo and discuss your specific requirements. We'll help you evaluate whether env51 is the right fit for your organization and can provide a proof-of-concept for enterprise customers.

CI/CD integration is currently in development and on our roadmap. We're actively working on native support for GitHub Actions, GitLab CI, Jenkins, CircleCI, and other popular CI/CD platforms. Contact us to learn more about our integration roadmap and timeline.

env51 uses industry-standard AES-256 encryption for data at rest and TLS 1.3 for data in transit. All secrets are encrypted on the client side before transmission. We use secure key derivation functions (KDF) and maintain separate encryption keys for each vault. Our cryptographic implementation follows NIST guidelines and is regularly audited by third-party security experts.

Yes, our on-premise deployment fully supports air-gapped (offline) environments. You can install and run env51 entirely within your private network without any external dependencies. We provide Docker images, Kubernetes manifests, and installation packages that can be transferred offline. Updates and patches can be applied manually without internet connectivity.

Vaults are top-level containers with their own encryption keys and access controls, ideal for separating projects or environments. Collections are organizational groups within vaults, perfect for categorizing secrets (e.g., "Database", "API Keys", "OAuth"). Think of vaults as projects and collections as folders. You can set different team permissions for each vault and collection.