> ## Documentation Index
> Fetch the complete documentation index at: https://docs.airmdr.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Vault

> AirMDR Vault uses encrypted, one-time email links to securely collect and store sensitive credentials without requiring logins into AirMDR. All uploaded secrets are encrypted, access-controlled, and fully audited to support protected, automated incident response.

## 🔐 How to share Secrets via Vault (One-Time Secure Link)

**Vault** is a secure feature in AirMDR designed to streamline how secrets (like API keys, credentials, or tokens) are requested and handled for products. \
It allows security teams to securely collect sensitive data directly from clients **without requiring login access**, reducing operational friction while maintaining compliance and security standards.

<Info>
  AirMDR Vault ensures that your sensitive data is protected and only accessible by authorized team members.
</Info>

### 📧 Step-by-Step: What You Need to Do

<Steps>
  <Step title="Check Your Email" stepNumber={1}>
    1. You will receive an email from AirMDR system that looks like this:

       > **Subject:** Action Required: Provide Secret for \<Name> Organisation\
       > **From:** AirMDR Vault System \<[**no-reply@airmdr.com**](mailto:no-reply@airmdr.com)>\
       > **Includes:**
       >
       > * Required Secret name (e.g., "EDR API Key")
       > * Secure link to upload secret
       > * Instructions or description (e.g., Message from requester: "Please provide the Login credentials to your Lorem Ipsum console so that we can monitor your dashboard as discussed in our weekly sync-up")
  </Step>

  <Step title="Click the Secure Link">
    1. Click the **"Provide Secret"** button or link provided in the email.

           <img src="https://mintcdn.com/airmdr/-Uv__fqsZox2OjNr/images/Vault2.png?fit=max&auto=format&n=-Uv__fqsZox2OjNr&q=85&s=a23b66e4c51f575c0bc2b57897105510" alt="Vault2 Pn" title="Vault2 Pn" className="mr-auto" width="1474" height="924" data-path="images/Vault2.png" />

           <Info>
             This link is **secure**, **one-time use only**, and **expires** at a pre-defined set time (e.g., 24 or 48 hours) by AirMDR.
           </Info>

           <Note>
             If the link has already been used or expired, you will see an error message.
           </Note>
  </Step>

  <Step title="Paste the Secret">
    Once the page loads:

    <Warning>
      The link **can only be used once**. After opening the page, keep it open and do not refresh or close it until you complete pasting the secret value.
    </Warning>

    1. You’ll see a secure input box labeled **"Secret Value"**.
    2. Paste the secret value.

           <Tip>
             Please ensure that when you submit a secret, ID, or API token via Vault, you include a clear header describing the content, as this assists AirMDR (or any recipient) in promptly identifying it.
           </Tip>
    3. Click **"Save & Submit"**.

           <img src="https://mintcdn.com/airmdr/0VM1MGe-9i_z53FO/images/Vault6.png?fit=max&auto=format&n=0VM1MGe-9i_z53FO&q=85&s=cd0e30d552dfcb9364f6ffca9aab1d90" alt="Vault6 Pn" width="1194" height="838" data-path="images/Vault6.png" />

       ✅ You will see a confirmation message "**Submitted Successfully**" once the upload is successful.

           <img src="https://mintcdn.com/airmdr/0VM1MGe-9i_z53FO/images/Vault5.png?fit=max&auto=format&n=0VM1MGe-9i_z53FO&q=85&s=5d1c0b09c32b0ddb4ecfa2caaedd75e8" alt="Vault5 Pn" width="958" height="622" data-path="images/Vault5.png" />
  </Step>
</Steps>

### 🛡️ Compliance & Auditing

Vault logs captures all these to maintain transparency:

* Who requested a secret
* Provided on (Date & Time)
* Who provided the secret
* When it was accessed or expired

This ensures full **compliance visibility** for audits and incident reviews.