Microsoft Double Key Encryption
Protect Microsoft 365 documents with customer-controlled encryption keys.
Catalogue
All integrations
Filter by category or search by platform. Product pages explain the business case; the documentation covers setup in detail.
Microsoft 365 Service Encryption
Microsoft 365 Customer Key, so Microsoft cannot unlock regulated content alone.
Salesforce
External Key Management for Salesforce with full control over encryption keys.
ServiceNow
MPC-powered key management for ServiceNow encryption.
Genesys Cloud
Call recording encryption for Genesys Cloud contact centers.
Varonis
Encrypt the sensitive data Varonis discovers and classifies.
Microsoft 365 & SaaS
OpenAI Enterprise Key Management
Register your cloud KMS keys as OpenAI EKM external keys.
AWS KMS External Key Store (XKS)
External Key Store integration for AWS KMS.
Amazon S3
Server-side and client-side encryption options for Amazon S3.
Azure Managed HSM (EKM)
External Key Manager integration for Azure Managed HSM.
Snowflake Tri-Secret Secure
Tri-Secret Secure for Snowflake with DuoKey AWS XKS and MPC.
Cloud KMS & data platforms
Databricks
Format-preserving tokenization for Databricks with Spark / Unity Catalog UDFs.
Oracle TDE
Keep Oracle's TDE master key off the database host with DuoKey's PKCS#11 library.
SQL Server EKM
Extensible Key Management that keeps SQL Server keys outside the database.
SQL Server Always Encrypted
Client-side column encryption; DuoKey custodies the Column Master Key.
Databases
MySQL / MariaDB TDE
InnoDB tablespace encryption with a DuoKey-backed keyring plugin.
Databases
Percona PostgreSQL TDE
pg_tde encryption backed by the KMIP server in DuoKey Cockpit.
MongoDB CSFLE
Client-side field-level encryption; DuoKey custodies the master key.
MongoDB Queryable Encryption
Encrypted fields that stay queryable; DuoKey custodies the Customer Master Key.
Databases
Apache Cassandra TDE
SSTable and commitlog encryption with a rotation runbook that avoids downtime.
Databases
Couchbase
DuoKey provides the key encryption key behind Couchbase Encryption at Rest.
Virtualization & storage
Nutanix AHV
Bind Nutanix Data-at-Rest Encryption to a DuoKey-held key over KMIP.
Virtualization & storage
VMware vSphere & vSAN
DuoKey as a vCenter key provider over KMIP for VM, vTPM and vSAN encryption.
Virtualization & storage
Disk encryption
LUKS, Prim'X Cryhod and BitLocker with a DuoKey-held key encryption key.
Virtualization & storage
Tokenization
Format-preserving tokenization for application data.
OpenBao
Auto-unseal OpenBao with DuoKey MPC; a Vault-compatible migration path.
HashiCorp Vault
Integrate the DuoKey PKCS#11 provider with HashiCorp Vault Enterprise.
Secrets & PAM
CyberArk Conjur
Connect CyberArk Conjur to DuoKey Cockpit as a secret manager backend.
PKI, signing & standards
PKI & Certificates
Certificate authority and certificate lifecycle with vault- or HSM-protected keys.
PKI, signing & standards
PDF Sign
Server-side PDF signing API; the certificate never leaves the tenant keystore.
PKI, signing & standards
KMIP 2.1
An OASIS KMIP 2.1 server for KMIP-compliant clients over TLS.
PKI, signing & standards
PKCS#11 library
A Cryptoki 3.2 provider that proxies every operation to DuoKey Cockpit.
PKI, signing & standards
Agentic Crypto Agility
Named cryptographic identity and revocation for autonomous agents.
Secrets & PAM
Key Management System
Keep encryption keys under your authority across cloud and hybrid estates.
Discuss the decisions that matter most to your security programme.
Tell us where control is difficult today. We will help you identify a practical next step.