Hey! Definitely, we have more details on the cryptography in our documentation here: https://infisical.com/docs/security/overview https://infisical.com/docs/se

Hey! Definitely, we have more details on the cryptography in our documentation here: https://infisical.com/docs/security/overview https://infisical.com/docs/security/overview. Put simply, Infisical operates E2EE by default which means the platform itself can’t decrypt secrets. This is unless you opt out of E2EE (secrets remain encrypted at rest) to use select features like native integrations - this is, however, not necessary to use the platform. In your case, you might wish to run Infisical in E2EE mode for maximum security. That said, it’s always important for you to keep your instance of Infisical secure that is ideally to not allow bad actors to gain root access to the machine.