[AlwaysNewb23]

Doppler (https://doppler.com) is my preferred tool for storing API keys. It centralizes where you manage all of your environmental variables and makes it so you never risk exposing your API keys in a code repo. There's a CLI tool that makes it easy to use all of your environment variables while you're developing and a ton of integrations for wherever you prefer to deploy your code. Feel free to ask me anything about Doppler or secrets management - I'm a developer advocate at Doppler.

[hitpointdrew]

Looks like you are SOC 2 Type II compliant, which is better than nothing. However, it is very difficult for my organization to work with 3rd parties that are not ISO 27001 certified. Is Doppler working on ISO 27001 certification?

[AlwaysNewb23]

Doppler is exploring adding the ISO 27001 certification in the near future.