Skip to main content
In Qanapi, Configurations are the central building blocks for managing your tools and security settings. They act as isolated objects that hold specific settings, credentials, and encryption keys. Understanding the difference between the two types of configurations is crucial for setting up your environment correctly.

Types of Configurations

There are two primary types of configurations: Provider Configurations and Encryption Configurations.

Provider Configurations

Provider Configurations are used to manage your connection to external services, such as Qanapi Flow.
  • Purpose: They hold the authentication details (OAuth, Service Accounts) and metadata required to interact with the provider’s API.
  • Scope: A provider configuration typically maps to a single organization or workspace within a provider.
  • Usage: Use these to manage who has access to certain features and to monitor the usage of specific provider-linked services.
  • Add-Ons: All your active add-ons (e.g., Client-Side Encryption, Email Classification, Live Redaction) are linked to a Provider Configuration.

Encryption Configurations

Encryption Configurations are dedicated to managing the security and cryptographic aspects of your data.
  • Purpose: They store Master Encryption Keys (MEK), algorithms, and versioning information used for data protection.
  • Scope: These are decoupled from provider authentication, allowing you to use the same encryption standard across different providers or multiple configurations for different security levels.
  • Usage: When you enable an add-on that requires encryption (like Client-Side Encryption), you will assign it to an Encryption Configuration.
  • Isolation: By separating encryption from the provider configuration, we ensure that your cryptographic keys are managed independently of your service credentials.

Key Differences