{"id":"secrets-management","name":"Secrets & keys","short":"Secrets","areas":["it-infra","development"],"description":"API keys, certificates and service passwords — stored once, delivered where needed.","data_classes":["credentials"],"links":["password-manager","container-management","git-hosting"],"depends_on":[],"keywords":["vault","secrets","api keys","env"],"directories":[],"audience":["company"],"tools":["1password","bitwarden","doppler","hashicorp-vault","infisical","openbao","passbolt","vaultwarden"],"tools_expanded":[{"id":"1password","name":"1Password","tagline":"Popular password manager from Canada.","open_source":false,"self_hostable":false,"vendor":{"id":"agilebits","name":"AgileBits (1Password)","country":"CA","parent":null,"kind":"company","url":"https://1password.com","european":false},"modes":["eu","ex"],"verdicts":{"eu":{"verdict":"red","rule":5,"reason":"AgileBits (1Password) is outside Europe, even when the servers are not."},"ex":{"verdict":"red","rule":3,"reason":"Hosted outside Europe: your data sits under non-European jurisdiction."}},"page":"/tools/1password"},{"id":"bitwarden","name":"Bitwarden","tagline":"Open-source password manager with a US company behind it.","open_source":false,"self_hostable":true,"vendor":{"id":"bitwarden","name":"Bitwarden","country":"US","parent":null,"kind":"company","url":"https://bitwarden.com","european":false},"modes":["sh","eu","ex"],"verdicts":{"sh":{"verdict":"green","rule":1,"reason":"You run it yourself: no data leaves your own infrastructure."},"eu":{"verdict":"red","rule":5,"reason":"Bitwarden is outside Europe, even when the servers are not."},"ex":{"verdict":"red","rule":3,"reason":"Hosted outside Europe: your data sits under non-European jurisdiction."}},"page":"/tools/bitwarden"},{"id":"doppler","name":"Doppler","tagline":"Secrets as a service from the US.","open_source":false,"self_hostable":false,"vendor":{"id":"doppler","name":"Doppler","country":"US","parent":null,"kind":"company","url":"https://www.doppler.com","european":false},"modes":["ex"],"verdicts":{"ex":{"verdict":"red","rule":3,"reason":"Hosted outside Europe: your data sits under non-European jurisdiction."}},"page":"/tools/doppler"},{"id":"hashicorp-vault","name":"HashiCorp Vault","tagline":"The secrets manager, now under IBM.","open_source":true,"self_hostable":true,"vendor":{"id":"hashicorp","name":"HashiCorp","country":"US","parent":"ibm","kind":"company","url":"https://www.hashicorp.com","european":false},"modes":["sh","ex"],"verdicts":{"sh":{"verdict":"green","rule":1,"reason":"You run it yourself: no data leaves your own infrastructure."},"ex":{"verdict":"red","rule":3,"reason":"Hosted outside Europe: your data sits under non-European jurisdiction."}},"page":"/tools/hashicorp-vault"},{"id":"infisical","name":"Infisical","tagline":"Open-source secrets management for developers.","open_source":true,"self_hostable":true,"vendor":{"id":"infisical","name":"Infisical","country":"US","parent":null,"kind":"company","url":"https://infisical.com","european":false},"modes":["sh","eu","ex"],"verdicts":{"sh":{"verdict":"green","rule":1,"reason":"You run it yourself: no data leaves your own infrastructure."},"eu":{"verdict":"red","rule":5,"reason":"Infisical is outside Europe, even when the servers are not."},"ex":{"verdict":"red","rule":3,"reason":"Hosted outside Europe: your data sits under non-European jurisdiction."}},"page":"/tools/infisical"},{"id":"openbao","name":"OpenBao","tagline":"The open-source fork of Vault.","open_source":true,"self_hostable":true,"vendor":{"id":"openbao","name":"OpenBao project","country":"US","parent":"linux-foundation","kind":"community","url":"https://openbao.org","european":false},"modes":["sh"],"verdicts":{"sh":{"verdict":"green","rule":1,"reason":"You run it yourself: no data leaves your own infrastructure."}},"page":"/tools/openbao"},{"id":"passbolt","name":"Passbolt","tagline":"Team password manager from Luxembourg.","open_source":true,"self_hostable":true,"vendor":{"id":"passbolt","name":"Passbolt SA","country":"LU","parent":null,"kind":"company","url":"https://www.passbolt.com","european":true},"modes":["sh","eu"],"verdicts":{"sh":{"verdict":"green","rule":1,"reason":"You run it yourself: no data leaves your own infrastructure."},"eu":{"verdict":"yellow","rule":7,"reason":"European company, European servers, but someone else runs it."}},"page":"/tools/passbolt"},{"id":"vaultwarden","name":"Vaultwarden","tagline":"Lightweight Bitwarden-compatible server.","open_source":true,"self_hostable":true,"vendor":{"id":"vaultwarden","name":"Vaultwarden project","country":"unknown","parent":null,"kind":"community","url":"https://github.com/dani-garcia/vaultwarden","european":"unknown"},"modes":["sh"],"verdicts":{"sh":{"verdict":"green","rule":1,"reason":"You run it yourself: no data leaves your own infrastructure."}},"page":"/tools/vaultwarden"}],"page":"/needs/secrets-management"}