Types of Configurations
There are two primary types of configurations: Provider Configurations and Encryption Configurations.Provider Configurations
Provider Configurations are used to manage your connection to external services, such as Qanapi Flow.
- Purpose: They hold the authentication details (OAuth, Service Accounts) and metadata required to interact with the provider’s API.
- Scope: A provider configuration typically maps to a single organization or workspace within a provider.
- Usage: Use these to manage who has access to certain features and to monitor the usage of specific provider-linked services.
- Add-Ons: All your active add-ons (e.g., Client-Side Encryption, Email Classification, Live Redaction) are linked to a Provider Configuration.
Encryption Configurations
Encryption Configurations are dedicated to managing the security and cryptographic aspects of your data.
- Purpose: They store Master Encryption Keys (MEK), algorithms, and versioning information used for data protection.
- Scope: These are decoupled from provider authentication, allowing you to use the same encryption standard across different providers or multiple configurations for different security levels.
- Usage: When you enable an add-on that requires encryption (like Client-Side Encryption), you will assign it to an Encryption Configuration.
- Isolation: By separating encryption from the provider configuration, we ensure that your cryptographic keys are managed independently of your service credentials.