Per-workspace encrypted credentials
Last updated 2026-06-14
Definition
Every credential you connect is encrypted at rest and scoped to one workspace. A token belongs to the workspace that added it and is never readable by another tenant. So when two companies both connect Stripe, their keys stay sealed and separate — Quri scopes access by construction, not by a filter someone could forget.
How to do this in Quri
- Connect a source from inside the workspace that should own it.
- Quri encrypts the credential at rest and ties it to that workspace.
- Switch workspaces to confirm each one only sees its own connections.
- Manage or remove a credential from within its owning workspace at /app/connect.
Frequently asked
- Is my data encrypted?
- Yes. The credentials Quri stores for your connectors are encrypted at rest and scoped to your workspace, so a token added in one workspace is never exposed to another tenant.
- Can another customer’s workspace see my connected sources?
- No. Credentials are scoped per workspace by construction, not by an optional filter. A token added in your workspace is unreadable from anyone else’s.