Protect incident fields

DuoKey for ServiceNow works with Column Level Encryption and Edge Encryption, so the keys behind sensitive fields stay outside ServiceNow.

Keys outside ServiceNow

Sensitive fields are encrypted under keys you control, not keys the platform holds.

Workflows keep running

Encryption works within ServiceNow without disrupting performance or user experience.

Compliance-ready

Supports GDPR, HIPAA, FINMA, NIS2 and DORA programmes.

Encrypt the fields that matter.

Column Level Encryption protects chosen fields in the instance, with keys managed by DuoKey instead of the platform.

Choose which tables and fields are protected.
Operations teams keep their workflows.

Edge Encryption, before data leaves.

With Edge Encryption, data is encrypted on your side before it reaches the ServiceNow instance, under keys you hold.

The cloud instance stores ciphertext for protected fields.
Keys protected with MPC, HSM or CloudHSM.

Full key lifecycle.

Create, rotate, revoke and retire keys from the Cockpit, with policies on who can act.

Rotation and revocation without platform tickets.
One console with your other cloud and SaaS keys.

Evidence for every audit.

Every key operation is recorded, so auditors see who used which key, when, and for what.

GDPR, HIPAA, FINMA, NIS2 and DORA reviews.
No single point of compromise in key custody.

Key features

Column Level Encryption

Keys for protected fields managed outside ServiceNow.

Edge Encryption

Encryption before data reaches the instance.

MPC, HSM or CloudHSM

Choose the custody model per environment.

Lifecycle management

Creation to retirement, with rotation and revocation.

Audit trail

Every key operation recorded.

Straightforward integration

Works within the ServiceNow environment.

Proof in practice

Where teams deploy this

Financial Services

Secure Cloud Data Storage for Financial Services

Protect Customer Data and Ensure Compliance with DuoKey's Secure Cloud Storage for the Financial Industry

Read use case

Financial Services

Data Encryption for DORA Compliance

Meet DORA's requirements for encryption and key management with customer-controlled keys across cloud and SaaS.

Read use case

Deep dives

Field guides for your programme

What Is BYOK? Bring Your Own Key Encryption Explained

BYOK (bring your own key) lets you generate and control the keys a cloud service uses. How it works on Azure, AWS, Google and Microsoft 365. Limits.

Read guide

Compliance

Frameworks this product supports

DORA

ICT risk management and resilience for the EU financial sector, with encryption and keys you can prove you control.

Open framework

GDPR

Article 32 security, breach risk and transfers, encryption that is meaningful because you hold the keys.

Open framework

NIS2

Network and information security for essential and important entities, encryption and keys you govern, not just a checkbox.

Open framework

Trust

Assurance and customer programmes

ISO

ISO/IEC 27001:2022

Certified information security management system.

Security at DuoKey

Trust Center

Security and compliance documents for due diligence.

Open Trust Center

Customer programmes

Volkswagen · Automotive

OTA that stays under OEM authority.

DuoKey keeps PKI and signing with one of the world's leading automotive manufacturers, including at the edge, on the platforms already in production.

View case study

ICRC · Humanitarian

Beneficiary data sealed by keys the ICRC controls.

RedSafe, the ICRC's digital platform for people affected by conflict, encrypts beneficiary data with HashiCorp Vault. DuoKey auto-unseals Vault with an MPC-protected key under ICRC control, so no operator holds unseal keys and no hosting provider can open the data.

View case study

Swiss energy operator · Energy · Critical infrastructure

Board papers protected with a key Microsoft does not hold.

A Swiss critical-infrastructure operator in the energy sector uses DuoKey Double Key Encryption to keep its board's most sensitive documents in Microsoft 365, with the second key under its own control.

View case study

Major German bank · Banking

Microsoft 365 for a bank, with the key in the bank's hands.

A major German bank uses DuoKey Double Key Encryption to keep confidential client and internal data in Microsoft 365, while the second key stays outside Microsoft.

View case study

Swiss fintech bank · Banking · Digital assets

Blockchain transactions signed without a complete key ever existing.

A leading Swiss fintech bank secures its blockchain transactions with DuoKey MPC: signing keys are split into shares, and a transaction is signed only when policy and approvers agree.

View case study

Automotive manufacturer · Automotive · PKI

PKI and certificate lifecycle, automated end to end.

An automotive manufacturer uses DuoKey to run its PKI and automate the certificate lifecycle across IT, plants and connected services, so an expired certificate no longer stops the business.

View case study

OpenBAO Migration · Secrets management

Vault to OpenBAO Migration

Escape HashiCorp Vault Enterprise's per-token licensing and BSL vendor lock-in. Migrate to OpenBAO with DuoKey SD-HSM MPC auto-unseal and DuoKey Managed OpenBAO Service: same API, zero code changes and up to 60-80% lower TCO (estimate; depends on tokens, support and HSM estate).

View case study

ServiceNow, with the keys kept at home.

See sensitive ServiceNow fields encrypted under keys you control.

Request a demo Start a free trial

Products

Check out the other DuoKey products

Service Encryption for Microsoft 365

Bring your own root keys to Microsoft 365 service encryption, generated and held under your control.

View product