Your secrets, governed. Compliance without custody.
Clef Pro is launching soon — a hosted governance dashboard for the Clef CLI. See encryption metadata, track key rotation, enforce policies, and audit recipients — without ever touching ciphertext.
Governance without custody
Namespace × environment grid showing every encrypted file, key type, recipients, and compliance status.
See when every encryption key was last rotated. Get alerted before policies are violated.
Define governance rules — max rotation age, required key types, minimum recipients — enforced automatically.
See exactly who can decrypt each secret file via key fingerprints. No more guessing.
One CI step. Reports flow automatically on every push — no agents to install.
Only encryption metadata leaves your pipeline. Ciphertext and decrypted values never touch our servers.