Securely managing sensitive data like API keys or OAuth tokens is essential for any integration. The built-in secret storage system uses client-side encryption to protect user secrets. Secrets are encrypted with a user-specific key and stored locally in the browser’s localStorage, scoped to your integration’s domain — never sent to our platform. This ensures that private information remains under your control and respects user privacy by design.