Data Security

Archestra stores provider keys, connector credentials, conversations, and tool output. Credential storage and content encryption have separate keys and rotation procedures.

Secrets Management covers the encryption key for saved credentials, optional Vault storage, and key rotation. Keep encryption keys in your deployment's secret manager and preserve them when restoring a database.

Content Encryption covers encryption of conversations and tool output. Credentials explains how to save reusable credentials and choose their visibility. Encryption protects stored values; Access Control determines who can use or manage them.