How Unity keeps secrets a secret with SendSafely

The challenge

Unity is the world-renowned platform for real-time 3D content development. Behind the scenes, Unity's DevOps and Customer Support teams routinely exchange sensitive credentials, API keys, and proprietary files — both internally and with external contributors and customers.

Their existing tools, including email, Slack, Zendesk and Jira, weren't designed for the level of secure data handling Unity required. On top of that, audit compliance with SOX, SOC 2 and GDPR demanded strict control over how data is stored, shared, and retained, regardless of the platform in use.

Secure external collaboration

Unity adopted SendSafely to securely transmit and store sensitive data inside and outside the organization, and two key use cases quickly emerged. The first centers on the Customer Engagement Team, which uses SendSafely Workspaces to collect and store sensitive customer data throughout the support process.

Each Workspace is associated with a specific customer ticket, with folder names automatically generated based on the corresponding bug or issue. Bug-related files and other artifacts are gathered from customers by simply sharing a link to the SendSafely Workspace, and support engineers are automatically provisioned access to those files through automation.

Secure internal collaboration

The second use case lives across Unity's technical teams. Each group maintains its own secure secrets store of passwords, API keys, and configuration files. When temporary access credentials need to be shared beyond a team — with another group or an outside contractor — SendSafely is the standard tool.

Teams lean on automatic expiration and deletion, access limits that control how many times a package can be opened, and detailed tracking of every view and access. The result is secure, shared access to support artifacts for multiple engineering teams, while sensitive customer content stays out of Jira and Zendesk, minimizing risk and keeping Unity audit-ready. SendSafely also handles large files with ease, including code and binary files.

Secrets that stay secret

From internal DevOps teams to customer support, SendSafely helps Unity scale secure communication and collaboration without compromising speed or compliance. Secure data workflows now run across both internal and external support processes, users experience minimal friction, and Unity maintains end-to-end compliance with SOX, SOC 2 and GDPR — regardless of where or how data is accessed. Everywhere secrets travel, they stay secret.