Encryption keys and sensitive credentials are provided and owned by the customer. They are stored in encrypted vaults and keystores and are not accessible to ERPure.AI personnel.