Hosting & Security

SpecVault is a fully hosted service. There is nothing to install or operate — sign in at specvault.sentinelflux.in and start publishing specs. This page explains how the hosted service is run and secured.

How SpecVault is hosted

SpecVault runs on managed cloud infrastructure operated by SentinelFlux. We handle provisioning, deployment, TLS certificates, security patches, and upgrades. New features and fixes roll out continuously — there are no versions for you to install or migrate.

Data isolation

Each account's data — services, spec versions, subscriptions, API tokens, and audit log — is logically isolated. You only ever see and manage data that belongs to your own account.

Encryption

• In transit — all traffic to the dashboard and API is served over HTTPS (TLS). Plain HTTP is redirected to HTTPS.
• At rest — spec history and account data are stored on encrypted managed storage.
• Tokens — API tokens are bcrypt-hashed before storage; the plaintext value is shown only once at creation and never recoverable afterwards.

Backups

SpecVault data is backed up regularly as part of the managed service. You don't need to run cron jobs, snapshot volumes, or manage object storage — spec history and the audit log are retained and recoverable on our side.

Access control

Dashboard access is authenticated per user. Machine access for CI/CD uses scoped API tokens that you create and revoke from Settings → API Tokens. Revoking a token immediately blocks any pipeline still using it.

Data export

Your data is portable. Every spec version can be downloaded in its original JSON/YAML form, and the audit log is exportable as JSON from the dashboard. If you ever stop using SpecVault, you can take your spec history with you.