About
SpaceTent, and the file your service cannot start without.
SpaceTent scopes, designs, builds, and runs cloud software. EnvVault is the SpaceTent product for .env files.
What it solves
A service needs its database URL, API keys, and other secrets before it can start. That list usually lives in a .env file. The awkward part is getting the same file onto every laptop and server without leaving a copy somewhere that can read it.
Chat, email, and a shared drive all keep the plaintext. A hosted vault that decrypts for you can read every value too. EnvVault takes a different cut. Your browser encrypts the file with AES-256-GCM before upload. The server stores the ciphertext and the name of the secret. The key never arrives here.
People you invite can see that the secret exists. They still need the key, passed separately, before they can open it. Lose the key, and that file is gone. That is what “the key stays with you” means.