Glossary

API (Application Programming Interface) A programmable interface to ingest, query, export, and automate vault workflows.

Export Portability The ability to download your data + metadata in open formats to avoid lock-in and enable migrations.

Zero Trust Security model that assumes no network is inherently trusted; access is continuously verified and scoped.

SSO (Single Sign-On) Centralized authentication (often via identity providers) for consistent access control across tools.

OIDC (OpenID Connect) Identity layer on OAuth 2.0 used for modern login/SSO integrations.

OAuth 2.0 Authorization framework that lets apps access resources without sharing passwords (scoped tokens).

Token A credential (often short-lived) used to authenticate or authorize API requests and sessions.

Threat Model A structured view of what you’re protecting, from whom, and how; guides security design choices.

Data Sovereignty Requirements about where data is stored/processed (region/country), often tied to legal and compliance needs.

Cold Storage Low-cost archival storage for infrequently accessed data; great for long-term preservation with slower retrieval.