The vault holds the credentials your team shares: the Instagram account, the hosting provider, the wholesaler account. You'll find it in the navigation under "Passwords". Instead of sending passwords around in chat, you store them once in the vault and share them through roles.
The vault has two kinds of entries. Private entries belong only to the person who created them, and not even the organization's owner can see them. Shared entries and folders are visible to everyone whose role has the Team passwords permission.
How the vault works in CIRO NOISE
Every entry is stored encrypted on the server, each with its own key. A copy of the database alone isn't enough to read a password. When you want to reveal a password, CIRO NOISE sends a six-digit code to your inbox. It's valid for 10 minutes.
Once you enter the right code, the vault stays open for 60 minutes, but only on the device and in the session where you entered it. After that it locks itself. After five wrong attempts the code expires and you request a new one, so nobody can try out codes.
Permissions and protection
The vault uses the same roles as the wiki and tasks. If someone loses the role or leaves the organization, they stop seeing the shared entries at that very moment. The AI doesn't read the vault, and external AI tools and API keys can't reach it either.
An everyday example
Mara from marketing needs the password for the Instagram account. She opens the "Marketing" folder, clicks "Reveal" and gets a code by email. For the rest of the hour she can reveal other passwords without requesting another code. When Jonas moves to sales and gets a role without the Team passwords permission, the shared entries disappear for him immediately.