Secret Handling Principles

OrviQ applies defence-in-depth principles to protect cryptographic keys, session tokens, and integration credentials.

---

Standards & Practices

• Vault-Backed Storage: All external API keys and engine tokens are encrypted at rest using platform-managed cryptographic secrets.
• Log Redaction: System logs, telemetry traces, and exception handlers automatically scrub bearer tokens, session cookies, and API keys.
• Least-Privilege Database Access: Runtime application queries execute under restricted database roles without DDL or table ownership entitlements.
• Strict Transport Security: All production web traffic, API calls, and documentation endpoints enforce HTTPS with TLS.