Product demo

Discover DuoKey for Varonis

Watch the explainer video

Turn discovery into protection for sensitive files

DuoKey encrypts what Varonis finds and classifies, through Double Key Encryption, without changing how people work.

Find, then protect

Data Varonis classifies as sensitive gets encrypted under your keys.

Zero operational impact

Encryption runs without changing user workflows.

No single key holder

Keys split with MPC, so no single party holds the full key.

Varonis finds it.

Varonis discovers and classifies sensitive data across your file shares and Microsoft 365, the starting point for what to protect.

Works with existing discovery and classification.
No new tooling for data owners.

DuoKey protects it.

Classified data is encrypted under keys you control, so the discovery result becomes protection, not just a report.

Audit evidence for GDPR, HIPAA, ISO 27001 and NIS2.
Policy-driven, not manual.

Two keys, one outside Microsoft.

Double Key Encryption keeps a second key outside Microsoft, so protected content cannot be opened by the cloud alone.

Contextual access checks on every key request.
MPC-distributed second key.

People keep working.

Encryption runs without changing how people open, edit and share their documents.

Zero operational impact.
Straightforward integration.

Key features

Varonis integration

Protect what discovery and classification find.

Double Key Encryption

A second key outside Microsoft.

MPC key management

No single point of failure.

Zero-trust access

Role, MFA, IP, group and location checks.

Zero operational impact

No change to user workflows.

Audit evidence

For GDPR, HIPAA, ISO 27001 and NIS2.

Proof in practice

Where teams deploy this

Financial Services

Secure Cloud Data Storage for Financial Services

Protect Customer Data and Ensure Compliance with DuoKey's Secure Cloud Storage for the Financial Industry

Read use case

Financial Services

Data Encryption for DORA Compliance

Meet DORA's requirements for encryption and key management with customer-controlled keys across cloud and SaaS.

Read use case

Deep dives

Field guides for your programme

NIS2 Encryption Requirements: What Enterprises Must Implement

NIS2 encryption and key-management expectations for essential and important entities, what supervisors look for beyond “data is encrypted.”

Read guide

Compliance

Frameworks this product supports

GDPR

Article 32 security, breach risk and transfers, encryption that is meaningful because you hold the keys.

Open framework

NIS2

Network and information security for essential and important entities, encryption and keys you govern, not just a checkbox.

Open framework

ISO 27001

International standard for information security management systems. DuoKey is ISO/IEC 27001 certified.

Open framework

Trust

Assurance and customer programmes

ISO

ISO/IEC 27001:2022

Certified information security management system.

Security at DuoKey

Trust Center

Security and compliance documents for due diligence.

Open Trust Center

Customer programmes

Volkswagen · Automotive

OTA that stays under OEM authority.

DuoKey keeps PKI and signing with one of the world's leading automotive manufacturers, including at the edge, on the platforms already in production.

View case study

ICRC · Humanitarian

Beneficiary data sealed by keys the ICRC controls.

RedSafe, the ICRC's digital platform for people affected by conflict, encrypts beneficiary data with HashiCorp Vault. DuoKey auto-unseals Vault with an MPC-protected key under ICRC control, so no operator holds unseal keys and no hosting provider can open the data.

View case study

Swiss energy operator · Energy · Critical infrastructure

Board papers protected with a key Microsoft does not hold.

A Swiss critical-infrastructure operator in the energy sector uses DuoKey Double Key Encryption to keep its board's most sensitive documents in Microsoft 365, with the second key under its own control.

View case study

Major German bank · Banking

Microsoft 365 for a bank, with the key in the bank's hands.

A major German bank uses DuoKey Double Key Encryption to keep confidential client and internal data in Microsoft 365, while the second key stays outside Microsoft.

View case study

Swiss fintech bank · Banking · Digital assets

Blockchain transactions signed without a complete key ever existing.

A leading Swiss fintech bank secures its blockchain transactions with DuoKey MPC: signing keys are split into shares, and a transaction is signed only when policy and approvers agree.

View case study

Automotive manufacturer · Automotive · PKI

PKI and certificate lifecycle, automated end to end.

An automotive manufacturer uses DuoKey to run its PKI and automate the certificate lifecycle across IT, plants and connected services, so an expired certificate no longer stops the business.

View case study

OpenBAO Migration · Secrets management

Vault to OpenBAO Migration

Escape HashiCorp Vault Enterprise's per-token licensing and BSL vendor lock-in. Migrate to OpenBAO with DuoKey SD-HSM MPC auto-unseal and DuoKey Managed OpenBAO Service: same API, zero code changes and up to 60-80% lower TCO (estimate; depends on tokens, support and HSM estate).

View case study

From finding sensitive data to locking it.

See Varonis discovery and DuoKey encryption work together.

Request a demo Start a free trial

Products

Check out the other DuoKey products

Salesforce Encryption

Customer and opportunity data stay useful in Salesforce, without giving the CRM the last encryption key.

View product