🔐Three-Layer EncryptionAES-256-GCM with Platform → Org → Variable key hierarchy. Per-record IV via Web Crypto API. Zero plaintext in database.
🏗️Org → Project → EnvironmentHierarchical structure with _base + dev/staging/prod environments, cross-environment diff, and instant rollback.
⌨️CLI-FirstPull, push, diff, and inject environment variables from the command line. Scriptable and CI-friendly.
🤖AI Key ProxyRoute LLM traffic through ioenv. Keys never touch client code. Per-model cost tracking and budget controls.
📋Full Audit TrailEvery operation logged with actor, IP, and timestamp. Complete visibility into who changed what and when.