Env Groups
Env groups are reusable bundles of environment variables you can attach to any service or environment. Edit the group once and every attached service gets the change on the next deploy.
Creating a Group
Go to Settings → Env Groups → New, name the group, and add variables exactly like you would on a service. Groups are team-scoped: every service in the team can attach them, but other teams can't see them.
Attaching to a Service
In a service's Environment Variables tab, click Attach group. A service can attach multiple groups; values layer on top of each other in attach order, with per-service vars taking the highest precedence.
# Effective env, top wins:
# 1. Per-service overrides (highest)
# 2. Env group attachments (in attach order, later wins)
# 3. Auto-injected sibling URLs (DATABASE_URL, REDIS_URL …)Per-Environment Groups
Groups can be scoped to a specific environment (Production, Staging, Preview). Attaching a Production-scoped group to a service only injects its values into Production deploys. Useful for splitting third-party API keys by environment without duplicating the rest of the bundle.
Secrets & Audit
Variables marked as secrets in a group are encrypted at rest and never printed in deploy logs. Membership changes (attach / detach / value edit) land in the activity log so you can trace which group propagated which value when.