Compliance & Security
Service Credentials and Portal Settings: One Vault for Every Key
Every key and password for connected services lives in one encrypted place. No module asks for a key anywhere else.
One vault for every key means one place to protect, rotate and audit.
Summary
Service Credentials stores keys for AI, text, voicemail, email, storage, call center and other services, encrypted.
Agency Administration also covers the notification email address, AI model choice, Token Monitor and modules.
Only super admins and owners see these settings.
Key takeaways
Never paste service keys into individual tools.
Update the default AI model when Token Monitor warns of a deprecation.
Set a branded Email From address for notifications.
Where to find it
Agency settings are for super admins and owners. Open Settings at the bottom of the menu. Below your own settings is Agency Administration, which only authorized administrators see.
Service Credentials
Service Credentials is the one place where all keys and passwords for connected services are kept: AI providers, text and voicemail providers, email providers, file storage, your call center and others. Secrets are encrypted. No tool asks for a key anywhere else.
That design choice matters. When each module stores its own keys, they end up scattered across settings pages, exported in backups and seen by more people than necessary. With one vault, there's one place to protect, one place to rotate and one place to audit. Each module's settings (CallGrade, File Sharing, e-OSCAR Agent and others) show whether its connection is set up and offer a test button, without exposing the key.
Email From address
Optional: set the Email From Address. Every notification email (task assignments, contact form and so on) is sent from this address with the agency name. Leave it blank for an automatic address based on your site.
AI services
Keep the default model for AI services current. If Token Monitor warns that a model is deprecated or retired, change it here.
Token Monitor
See total tokens, estimated cost in USD and total requests, then usage by service, usage by model, a daily token usage chart and the last 50 calls. It's how you keep AI spending visible; see AI token economics.
Modules
Shows the modules you have and lets you install or update them and manage renewals. It's the same list as HeartBeat → Modules.
Good practices
- Limit who has super admin and owner roles.
- Rotate keys when staff with access leave, and periodically.
- Test connections after changing a key.
- Review Token Monitor monthly.
For broader security practices, see how collection agencies protect debtor data.
Why it matters
Credential sprawl is one of the most common security weaknesses in connected systems. A single encrypted vault removes it by design.
See it working in your agency
Book a 30-minute guided Nexum demo built around your agency's real bottleneck, or call 502ZONE directly at (786) 524-4252. Nexum Open CRM is free: no license fee, no seat fees, no subscription. Add 502ZONE modules only when you want more recovery.
Related reading
Bring us your most expensive collections problem.
Our guided 30-minute session focuses on your real workflow and the problem costing you the most.
Schedule a Demo