Encrypted Token Vault
AES-256-GCM encryption, credential isolation, and OAuth scope security.
Third-party integrations (GitHub, GitLab, Vercel, Netlify, Neon, Supabase) require access tokens to operate on your behalf. BhaiCode secures these credentials through the Encrypted Token Vault.
Encryption Standards
- AES-256-GCM Encryption: All access tokens, refresh tokens, and API keys are encrypted at rest using AES-256-GCM.
- Per-Tenant Keys: Keys are derived per tenant using cryptographically secure key derivation functions (PBKDF2 / HKDF).
- No Plaintext Storage: Tokens are never stored in plaintext in databases, caches, or logs.
- TLS 1.3: All traffic between your client, the BhaiCode API, and third-party services is encrypted in transit.