Question 137 · Security questionnaire

How are secrets and API keys managed?

Secrets follow the contracted cloud/KMS patterns, not chat logs. Buyer IdP credentials stay in the buyer tenant.

Tender bullet

Secrets in KMS/cloud patterns; buyer IdP secrets stay with the buyer.

Paste into the questionnaire annex

Related tender questions

Is data encrypted in transit and at rest?
Is admin access role-based?
Is a penetration-test summary available without a form?
Do you claim ISO 27001 on this page?

Educational and evidentiary material for procurement and IT evaluators. Adapt with your legal, privacy, and information-security counsel. Commercial terms, SLAs, and certificate serials are confirmed in the bid — not invented on this page.