Infisical is a platform for managing secrets such as API keys, passwords and environment variables. It offers versioning, audit logs and automatic rotation, and extends this with certificate management (PKI), key management and privileged access. The core is open source under the MIT licence; features in the ee directory are covered by a separate commercial Infisical licence. You can use Infisical Cloud or host the software yourself with Docker or Kubernetes, including in an air-gapped environment.
The company, Infisical, Inc., is based in San Francisco in the United States and is subject to US jurisdiction, including the CLOUD Act. Infisical Cloud runs on AWS and has a US and a European region, each in its own AWS account. The documentation gives no formal data-residency guarantee and no specific AWS regions, and backups are also replicated to another cloud provider. The privacy policy mentions data protection terms under the GDPR. Those wanting full control can self-host, in which case, according to the vendor, secret material does not pass through systems operated by Infisical.