# Security & control

You stay in control. How we store keys, and how to switch them off.

## Our rules

- We only ask for access we need for the automations we are building for you.
- Keys are stored in an encrypted credential store, never in email, chat or documents.
- Only the people working on your project can use them.
- When our work together ends, we delete them. You should also switch them off (see below).

## Your rules (please follow these)

### Step 1: Never send a key in plain text

Not by email, Slack, WhatsApp, Teams or text message. Always use [OneTimeSecret](https://guide.upliftedconsulting.com/start-here/sending-securely.md).

### Step 2: Name your keys clearly

When a tool asks for a name, call it **Uplifted Consulting**. Later you can see which key is ours and remove it in one click.

### Step 3: Give limited access when the tool allows it

Some tools let you pick what a key can do (these are called "scopes" or "permissions"). Each page in this guide tells you exactly what to tick.

### Step 4: Set spending limits on AI tools

For OpenAI, Anthropic and OpenRouter, set a monthly limit. The pages show how.

## How to switch off our access

Go back to the same screen where you created the key and click **Delete**, **Revoke** or **Remove** next to the key named "Uplifted Consulting". It stops working immediately.

> **Careful:**
> Our automations stop working the moment you delete a key. Tell us first if the automations are still in use.

## Think a key leaked?

Delete it right away and create a new one. Then send us the new one. No harm done: that is exactly what keys are designed for.

---
Source: https://guide.upliftedconsulting.com/start-here/security · Updated 2026-10-22