AES-256 Encrypted Credential Vault

Your proprietary API credentials and private refinery feeds are protected by enterprise-grade cryptographic standards.

Security Architecture

SpotMetal never stores plaintext API keys in the database. All sensitive tokens undergo authenticated encryption before database persistence.

AES-256 GCM Encryption at Rest

We utilize the Advanced Encryption Standard in Galois/Counter Mode (AES-256-GCM), providing both confidentiality and cryptographic integrity verification.

Initialization Vector & Key Isolation

Every stored credential generates a unique 96-bit Initialization Vector (IV), ensuring identical keys produce distinct ciphertexts.