End-to-end protection
- Every time capsule is encrypted using AES-256 while stored and TLS 1.3 in transit.
- Unique encryption keys and salts per capsule ensure that a single record compromise cannot unlock every memory.
- Secrets are managed securely via environment isolation and role-restricted vaults.