OpenCode Plugin
nexus-vault-shield
v0.1.0AlphaClassification-driven encryption for documents and project artifacts based on customer/project confidentiality levels.
Overview
Enforces encryption policies automatically based on the confidentiality level defined on customers or projects. Supports at-rest AES-256, field-level encryption with external KMS providers (AWS KMS, GCP Cloud KMS, HashiCorp Vault), and automatic watermarking on PDF exports. Every decrypt operation is logged to the audit trail.
Registered Hooks
document.uploadIntercepts document uploads and applies encryption based on the project confidentiality level before storage.
document.exportApplies watermarking and access controls to PDF exports based on classification level.
Custom Tools
nexus_encrypt_statusReports encryption status and classification level for a given document or project.
Details
Pricing€1.99/month per tenant. Available on Pro and Enterprise plans.
KMS ProvidersAWS KMS, GCP Cloud KMS, HashiCorp Vault, or built-in AES-256.