Regions and credentials

Select the region where the provider project stores data.

Changing region requires verification with the credential for the project in that region.

Credential handling

• Amplitude uses the project API key.
• Mixpanel uses the project token.
• Credentials are encrypted at rest with versioned AES-256-GCM keys.
• Credentials never appear in API responses, audit payloads, metrics, logs, or browser storage.
• The dashboard displays only a short suffix hint.
• Reconnect verifies a new credential before replacing a working one.
• Disconnect securely clears encrypted credential material while retaining non-secret audit history.

Amplitude and Mixpanel project keys used for analytics ingestion are project-scoped secrets in the UserGist server destination. A client-side Amplitude project key bundled in a mobile app is a separate direct-SDK configuration and must not be copied from browser storage into the integration flow.