Built for the path from .env to production
Six capabilities. One encrypted workspace. No second dashboard for secrets.
Secret Management
Encrypted storage with version history for every environment variable.
- AES-256-GCM encryption at rest with a dedicated encryption module.
- Reveal, duplicate, and restore secrets without exposing values in list views.
- Every change writes a new version so you can compare and roll back.
Team Collaboration
Organizations, roles, and invites so secrets stay with the right people.
- Workspaces with owner, admin, member, and viewer roles.
- Email invites with role assignment before anyone sees production values.
- Organization transfer and leave flows for long-lived teams.
CLI Sync
Pull and push secrets from the terminal with the Eanvi CLI.
- eanvi pull writes decrypted values to a local env file.
- eanvi push uploads local changes with optimistic concurrency checks.
- eanvi sync, diff, and doctor keep local and remote state honest.
Audit Logs
Full activity tracking for secrets, members, and billing events.
- Immutable log of create, update, reveal, import, and member actions.
- Filter by actor, action, and date from the activity view.
- Retention scales with plan — 7, 30, or 90 days.
Environment Support
Dev, staging, production, and preview — isolated by design.
- Named environments per project with independent secret sets.
- Archive, restore, and duplicate environments without copying values by hand.
- Bulk copy and delete across environments when you need a clean cutover.
Import / Export
Migrate from .env files, JSON, or YAML in a single pass.
- Import existing dotenv files and preview conflicts before write.
- Export masked or revealed sets for backups and CI handoff.
- Keep keys, comments, and structure instead of rebuilding by hand.