I am currently in the process of building a custom application within our Freshservice environment. The purpose of this application is to create a new group in Google Workspace whenever a ticket is created. However, I have concerns regarding the storage of sensitive data, specifically the client's Google service account credentials.

Upon researching the available options, I came across Freshservice's iparam framework, which seems to be a commonly used method for storing sensitive data within custom applications. However, I would like to explore alternative options, if any, to ensure the highest level of security for our client's information.

Could anyone please advise if there are any other recommended approaches or best practices for storing sensitive data within custom applications in the Freshservice environment? I want to ensure that we comply with industry standards and maintain the confidentiality of our client's data.