Vault for startups
Early on, one founder holds everything: the domain registrar, the cloud console, the payment provider, the analytics account, the social profiles. It works until that founder is on a flight and the payment provider needs re-authorising. Vault moves those logins into collections the team is granted by name, encrypted in the browser, recoverable through escrow your admins control, and logged on every read.
Included in every plan. No per-seat charge, no per-tool upsell.
In practice
Group the registrar, cloud and deployment logins in one collection, banking and payment providers in another, ad and social accounts in a third — and share each with the people whose job it is, not with everyone.
Every item is encrypted on the member’s device with a key derived from their passphrase. The server holds ciphertext only, which is the answer when your first enterprise customer’s security review asks how you store shared credentials.
A forgotten passphrase is recovered through an escrow flow controlled by your organisation’s admins, restoring access without weakening the encryption or emailing a password to anyone.
Every read, share and change is recorded with the actor and the time. When the seed round’s diligence asks who has had access to the production console, the log answers.
One platform
Vault shares with the same members and roles as every other tool, so an early employee who leaves and is marked inactive in HRMS loses access to every shared login at the same moment — the offboarding step startups most often discover they skipped. Rotating the credentials is still your job; knowing which ones is not.
Startups · Vault
It comes with every plan, alongside the other tools. Tell us your team size and we set up a working organisation for you to try.