Anyone who wants to protect data must not only look at the storage location. It is also important who controls the key for decryption. This is exactly where the difference lies. We encrypt your data with a Customer Managed Key (CMK). We manage this key in a FIPS Level 3 validated Key Vault that is controlled exclusively by us. This keeps control of the key separate from the actual data.

This is relevant to you for a simple reason: a cloud provider can legally only access what it actually has access to. If the key is stored in a separately managed key vault with access restrictions, this fundamentally changes the situation. The point is therefore not that a cloud infrastructure is beyond all technical risks, but that access to the key is legally and organizationally separated. This is precisely what strengthens protection against external access.

This topic therefore goes beyond mere data protection. The separation of data management and key control creates a higher level of compliance. It ensures clear responsibilities and a security architecture that has long been standard in regulated environments. In addition, there is auditability: access and key usage can be logged and traced.

For your procurement, this means: your data is not only stored in a clearly defined environment. It is additionally protected with a key whose access is beyond the reach of the hyperscaler. In this way, we create a security architecture that effectively safeguards your data and further increases your sovereignty in handling sensitive procurement information.