AES-256-GCM encryption
Every chunk is encrypted on the studio side before it leaves. Project keys stay inside your perimeter or HSM; cache nodes and our servers only ever see ciphertext — which satisfies studio NDAs and client security audits.
- Key exchangeX25519
- Key rotationper project
- TransportTLS 1.3 · mTLS