01
Cloud and data owners
Need AWS, Microsoft 365 and databases in production without giving the operator the last key.
Who it is for
Financial teams moving sensitive data to cloud without surrendering unlock authority
For banks and insurers that need cloud storage and SaaS while meeting DORA, GDPR and PCI expectations for key custody.
02
Risk and compliance
Need a product path that maps to DORA ICT risk and outsourcing reviews.
03
Security architecture
Need external key management that integrates with existing stacks—not a rip-and-replace.
AWS XKS
External Key Store keeps cryptographic operations outside Amazon for protected keys
M365 DKE / Customer Key
Collaboration data with independent or customer-operated key authority
SQL EKM
Database encryption keys outside the database host
Cloud storage without delegated custody
Financial institutions need cloud storage and SaaS. Default encryption often leaves keys with the operator. DuoKey connects to supported external-key and customer-key paths so regulated datasets stay usable while decryption authority stays with the institution.
How it works
Product path for financial cloud data
Start from where data already lives. Apply customer-controlled keys on those platforms.
AWS XKS and S3 programmes
External key store for KMS-backed workloads; S3 encryption options with customer-controlled keys where required.
Microsoft 365
DKE and Customer Key for regulated collaboration content.
SQL and ServiceNow
External key management for structured and operational data in databases and ITSM.
What changes
Outcomes tied to financial cloud programmes.
Regulatory-ready custody
Support DORA, NIS2, GDPR and PCI narratives with keys you govern.
Reduced operator plaintext path
Limit scenarios where a cloud account or vendor channel yields bulk decryption.
Operational continuity
Keep familiar AWS, M365 and database workflows while custody changes.
Next step
Still weighing the control model?
Bring the constraint. We’ll map the shortest practical path.
Ready to secure financial data in the cloud?
Map AWS, M365 and database workloads to customer-controlled keys, or schedule a scoped review.
Vertrauen
Assurance und Kundenprogramme
Kundenprogramme