OpenEvidence Security Basics
API Key Security
# .env (never commit)
OPENEVIDENCE_API_KEY=your-key
# .gitignore: .env
Checklist
- [ ] Keys in environment variables
- [ ] Separate keys per environment
- [ ] Key rotation schedule
- [ ] Audit logging enabled
Resources
Next Steps
See openevidence-prod-checklist.