Encryption at rest

Your data stored on Steinkauz’s systems is encrypted at rest. This means that when your conversations, account data, and other stored content are written to disk, they are encrypted. Only authorized systems and processes can decrypt them, which reduces the risk of exposure if storage is compromised.

What is encrypted

• API Keys: Stored in encrypted form.
• Conversations and messages: Stored in encrypted form.
• Account and settings data: Stored in encrypted form.
• Other content we store: Treated according to our security and data handling practices.

Encryption at rest is one layer of protection. Data is also protected in transit (e.g. over HTTPS) when you use the app and when we communicate with AI providers.

What you can do

You do not need to configure encryption; it is applied by default. For additional control over where your data goes and how long providers keep it, use security classifications, zero data retention (on Gateway), and BYOK if you want to use your own provider keys.

For a broader picture of how we handle data, see Data handling and the Privacy Policy.