Encryption
How Strive protects sensitive data at rest with per-tenant, KMS-backed envelope encryption.
Strive encrypts sensitive data at rest using envelope encryption backed by AWS KMS. Each workspace gets its own data key, so one workspace’s data is never readable with another’s key.
What’s encrypted
Section titled “What’s encrypted”- Connection credentials — OAuth access and refresh tokens, API keys, and passwords for your connected tools.
- Service-account keys used for data access.
How it works
Section titled “How it works”A per-workspace data key is generated and stored encrypted under a KMS master key. Sensitive fields are encrypted with that data key before they’re written to the database and decrypted only when needed to run your work.