Sensitive identifiers and who can see them

• Tax identification numbers.
• Identity document numbers and the identifiers of beneficial owners.
• Bank account numbers.
• Two-factor secrets and recovery codes of your team.

These values are encrypted in the database with AES-256-GCM before they are saved. The key is stored on the server, separate from the database, so a copy of the database alone does not reveal them.

• They are write-only for managers: you can enter or replace a value, but the screen shows only that one is set.
• Owners and admins can reveal the full value when needed. Each reveal is recorded in the audit log.
• Bank account numbers are shown by their last four characters everywhere else.
• The audit log lists which sensitive fields changed but never their values.
• Values never appear in logs or in the details of audit entries.