Understand secret encryption and redaction

Pixie CRM guidance. Follow the route for your workspace, check your role and enabled modules, and verify the result before moving on.

This guide explains that where sensitive integration and driver values are protected.

What this guide helps you do

Know where sensitive integration and driver values are protected. The instructions below follow the supplied module’s controller, form and model rules, including server-side validation and downstream effects.

Follow these steps

1. Go to Technical reference → Courier model and settings.
2. Check the source record and choose the supported action.
3. Save or submit once, then reopen the record and verify the result.

Fields and options

This action uses the values already stored on the selected source record. Review that record before continuing.

Rules and limits

• Driver NI and bank values are encrypted.
• Provider/BP secrets are encrypted.
• Audit and integration data are redacted before ordinary storage/display.
• Do not export secrets through reports or support screenshots.

Check it worked

• The source record, status/history and any downstream notification, provider, POD or finance record should agree after the action.

Security, audit and operational checks

• Use the exact record and least-privilege role before changing any state.
• Verify the saved record after every action; a browser message alone is not evidence that every downstream step completed.
• Use protected document and image routes rather than exposing server filesystem paths.
• Keep customer, driver, provider, financial and credential data within the authorised workflow.
• For provider, finance, employment, transport and compliance decisions, follow the organisation’s authorised professional process.

Related guides