Where are credentials and API keys stored?

VixPro AI uses a bring-your-own-key (BYOK) model.

What you provide:

• AI providers — Anthropic, Google, OpenAI, xAI
• Notification services — PagerDuty, Twilio
• Cloud integrations (optional) — API keys for backup monitoring and resource discovery (AWS, GCP, Azure, DigitalOcean)

VixPro AI never generates or owns these credentials on your behalf.

How they're stored:

• Isolated Fly.io container — one container per organization, credentials never shared across customers
• Never in the shared database — the database (Supabase) holds operational data (incident records, task history, audit logs), not secrets
• Accessed at execution time — credentials exist only in your org's container environment

Even if the database were compromised, there are no API keys or secrets to extract from it.