Keys and regions
Organizations hold projects; each project lives in one region and has its own keys and API address.
Organizations, projects and regions
- An organization is your company or team. Credit, limits and members belong to the organization.
- A project belongs to one organization and lives in one region, chosen when the project is created. Its uploads, transcripts, usage records, logs and webhooks are stored in that region.
- One organization can have projects in different regions — for example one project in India for domestic customers and, when it opens, another in Europe.
A project's region cannot be changed later. To move work, create a project in the new region and switch your keys.
API keys
Keys belong to a project and can only reach that project's data. Create and revoke them in the console under API keys. A key looks like sk_ followed by a public prefix and a secret; the console shows the prefix so you can tell keys apart, and the secret only once.
Send the key as a bearer token on every request:
Authorization: Bearer sk_…Keep keys on your server. Never ship one in a mobile app or browser code. If a key leaks, choose Replace in the console: a new key with the same name is created and the old one stops working immediately. Revoke stops a key without replacing it.
Audit log
Owners and admins can see every administrative change in the console under Account → Audit log: keys created, replaced or revoked; members invited, joined, changed or removed; project and retention changes; webhook changes; deleted transcription content; credit added. Each entry shows who acted (a person, an API key, or 26AI), when, and from which IP address, and the log can be exported as CSV. It never contains audio or transcript text.
Environments
Use projects as environments — for example a Production and a Development project. Each has its own keys, usage, logs, webhooks and retention, so test traffic never mixes with production.
The API address
Each project has its own API address, shown under API keys. Use it as the base URL for every request. A key sent to another region's address finds nothing there: requests return not_found.
Roles
Members of an organization have one of three roles:
| Role | Can |
|---|---|
| Owner | Everything, including deleting members and managing other owners. |
| Admin | Create projects and keys, manage webhooks, retention and members; read the audit log. |
| Member | Use the playground, read transcriptions, usage and logs. |