Skip to main content
iHub is internal, but it is not a secrets manager. Never add:
  • passwords, API keys, access tokens, private keys, or recovery codes;
  • production credentials or unredacted environment files;
  • unnecessary customer data or sensitive personal information;
  • confidential legal, payroll, or medical records unless the approved access model explicitly permits them.
Link to the approved system of record instead of copying restricted information into a page. If sensitive information is committed accidentally, contact the security owner immediately; deleting the visible text does not remove it from Git history.