DuoKey for KMS
Product sheet. 4 pages.
An overview of DuoKey's key management service. Keys are split across separate servers using multi-party computation, so no single server or cloud provider holds a whole key. It covers AWS, Azure, and Google Cloud, HSM integration, and the SaaS deployment. Get the sheet if you need to explain to your team or auditor why keys should not sit with the provider that holds the data.
Get the download
Tell us where to send the link. A business email is required.
If your cloud provider holds both your data and the keys to it, one breach, one misconfiguration, or one legal order can expose everything. The 2022 case of exposed Amazon RDS snapshots in the sheet shows how quickly that happens.
DuoKey splits each key across separate servers with multi-party computation, so no single server and no single provider ever holds the whole key. The sheet explains how that works across AWS, Azure, and Google Cloud, and how it fits with HSMs you already run.
Four pages, written for security and cloud teams. Download it to make the case for separating keys from data.
FAQ
Who is this for?
Security and cloud teams who want encryption keys held separately from the cloud that stores their data.
Which platforms does it cover?
AWS, Azure, and Google Cloud, with optional storage in a hardware security module (HSM).
Is it a technical specification?
No. It is a 4-page product overview from 2023. For architecture or API details, ask DuoKey directly.
Which regulations does it mention?
FINMA, HIPAA, GDPR, and LIPAD.