> ## Documentation Index
> Fetch the complete documentation index at: https://docs.facetime.trychert.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Security

> Short-lived credentials, signed events, and scoped access.

<CardGroup cols={2}>
  <div id="api-keys" className="chert-anchor-card">
    <Card title="API keys">
      Hashed at rest, displayed once, and instantly revocable.
    </Card>
  </div>

  <div id="webhooks" className="chert-anchor-card">
    <Card title="Webhooks">
      Signed with HMAC-SHA256. Verify every delivery before trusting it.
    </Card>
  </div>

  <div id="hosted-sessions" className="chert-anchor-card">
    <Card title="Hosted Sessions">
      LiveKit tokens are short-lived and room-scoped. API keys never reach clients.
    </Card>
  </div>

  <div id="bring-your-own-room" className="chert-anchor-card">
    <Card title="Bring Your Own Room">
      No standing credential exchange. You mint one per-call token; Chert never sees your LiveKit keys.
    </Card>
  </div>

  <div id="caller-identity" className="chert-anchor-card">
    <Card title="Caller identity">
      Caller handles are hashed in webhook payloads.
    </Card>
  </div>

  <div id="transcripts" className="chert-anchor-card">
    <Card title="Transcripts">
      Consent-gated, encrypted at rest, authenticated, and deletable on request.
    </Card>
  </div>
</CardGroup>