clavitor hosted
Clavitor never caches credentials — not in memory, not on disk, not anywhere. Every request is a fresh decrypt from the vault. That's the security model. To make it fast, we run 21 regions across every continent. Your data lives where you choose. $20 $12/yr.
We have strategically chosen our datacenter locations so that almost every place on the planet gets an answer within 60 ms. That's a convenience target, not a requirement — Clavitor works perfectly fine on slower connections, it just won't feel quite as instant. See how fast it is from your location. If you'd like a region closer to you, reach out and we'll work on it.
See network performance from your location →Three-tier encryption
Your vault is encrypted at rest. Your credentials are encrypted per-field. Your identity fields are encrypted client-side with a key that never leaves your device. No server — ours or anyone's — can read what it doesn't have the key to. That's the real protection. Zürich is the belt to that suspenders: a jurisdiction where nobody will even try to force open what mathematics already guarantees they can't.
Vault Encryption
Entire vault encrypted at rest with AES-256-GCM. The baseline. Every password manager does this.
Credential Encryption
Per-field encryption. Your AI agent can read the API key it needs — but not the credit card number in the same entry.
Identity Encryption
Client-side. WebAuthn PRF. The key is derived from your WebAuthn authenticator — fingerprint, face, or hardware key — and never leaves your device. We cannot decrypt it. Period.
What hosted adds
We run it, monitor it, and keep it up. You just use it.
Automatic daily backups. Encrypted at rest. Restorable on request.
Pick your region at signup. Your data stays there. Every continent covered.
Security patches and new features deployed automatically. No downtime.
HTTPS out of the box. No Caddy, no certbot, no renewal headaches.
Real human support. Not a chatbot. Not a forum post into the void.
On import, Clavitor extracts the domain from each credential's URL and assigns a scope automatically — "dev", "finance", "shopping". Your agents get the right access from day one, without manual tagging.
Clavitor detects API keys by pattern during import — OpenAI, AWS, GitHub, Stripe, and 10+ more. They're automatically separated into their own category so agents can find them without digging through password entries.
Disaster recovery
Every vault is automatically replicated to an inland backup location — no coastline, no tsunami risk, no storm surge. Your data is encrypted end-to-end — nobody but you can read it.
Deep in the Canadian prairies, over 1,000 km from the nearest ocean. No earthquakes, no hurricanes, no volcanoes — the most geologically stable terrain in North America. Canadian privacy law.
Backs up
| Almaty | 9,486 km (5,894 mi) |
| Cape Town | 15,772 km (9,800 mi) |
| Istanbul | 9,173 km (5,699 mi) |
| Lagos | 11,295 km (7,018 mi) |
| London | 7,041 km (4,375 mi) |
| Mumbai | 12,190 km (7,574 mi) |
| Stockholm | 7,016 km (4,359 mi) |
| Zürich | 7,780 km (4,834 mi) |
Landlocked in the center of Europe, surrounded by the Alps. Swiss data protection — among the strongest in the world. Politically neutral for over 200 years.
Backs up
| Bogotá | 9,066 km (5,633 mi) |
| Calgary | 7,780 km (4,834 mi) |
| Hong Kong | 9,306 km (5,782 mi) |
| Mexico City | 9,679 km (6,014 mi) |
| Montréal | 5,985 km (3,718 mi) |
| San Francisco | 9,363 km (5,817 mi) |
| Seoul | 8,763 km (5,445 mi) |
| Singapore | 10,299 km (6,399 mi) |
| Sydney | 16,571 km (10,296 mi) |
| São Paulo | 9,623 km (5,979 mi) |
| Tokyo | 9,577 km (5,950 mi) |
| Washington D.C. | 6,777 km (4,211 mi) |
Why not Almaty? Almaty is also inland and well-positioned in Central Asia — but it sits on an active seismic fault line. It serves as a great user-facing region for the area, but we chose Calgary and Zürich as backup sites specifically for their geological stability.
Dubai (me-central-1) — temporarily unavailable
On March 1, 2026, drone strikes physically damaged two of three AWS availability zones in the UAE. Both AWS Middle East regions (UAE and Bahrain) remain offline. We are waiting for AWS to restore service before we can offer Dubai as a region again. No customer data was affected — this is exactly why we replicate every vault to an inland backup site on the other side of the world.
If you were planning to use Dubai, the nearest alternatives are Mumbai, Istanbul, and Almaty. If you need to transfer an existing vault to a different region, we will do it for free — contact support@clavitor.ai.
$20 $12/yr. 7-day money-back. Every feature included. Price for life — your rate never increases.