> ## Documentation Index
> Fetch the complete documentation index at: https://ona.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Organization secrets

<Note>Available on the Enterprise plan. [Contact sales](https://ona.com/contact/sales) to learn more.</Note>

Organization secrets provide company-wide defaults. Shared credentials, API keys, and configuration are available to everyone in your organization. They are ideal for shared service accounts and company-wide integrations.

**Organization secrets have the lowest precedence.** Project secrets and user secrets with the same name will override them, allowing teams and individuals to customize as needed.

## Manage organization secrets

Navigate to **Settings → Organization → Secrets**.

<img src="https://mintcdn.com/gitpod-13c83c2b/bbZXuU8BPSZkustx/images/docs/flex/secrets/secret-organization-list.webp?fit=max&auto=format&n=bbZXuU8BPSZkustx&q=85&s=84fcc8992a2125dd27b65edf8a4eb8c8" alt="Organization secrets settings page showing list of company-wide secrets with type and name columns" width="2370" height="1698" data-path="images/docs/flex/secrets/secret-organization-list.webp" />

From here you can create, edit, and delete secrets. Each secret can be an [environment variable](/ona/configuration/secrets/environment-variables), [file](/ona/configuration/secrets/files), or [container registry credential](/ona/configuration/secrets/container-registry-secret).

## When to use organization secrets

* **Company-wide service accounts**: Shared database credentials, monitoring API keys
* **Default configuration**: Standard environment variables everyone needs
* **Container registry access**: Private images used across multiple projects

For project-specific credentials, use [project secrets](/ona/projects/project-secrets). For personal credentials, use [user secrets](/ona/configuration/secrets/user-secrets).

## Precedence example

If `API_KEY` exists at all three levels:

1. User secret value is used (highest)
2. Falls back to project secret
3. Falls back to organization secret (lowest)

This lets you set organization defaults while allowing projects and users to override when needed.
