Contact Us Book a call

Downloads

Sheets, briefs, and reports.

PDFs on key management, post-quantum migration, and the rules that name them. A business email is required before the file is sent.

Book a call Read the guides

Reports

6

it-sa 2026 edition. 25 pages, in German. Data as of 19 October 2026.

Quantum Readiness Report Germany

A measurement of 961 German organisations in the 16 NIS2 sectors, based on what their public servers negotiate. 33.8 percent already use a hybrid post-quantum key exchange. The report breaks this down by sector, compares Germany with ten European countries, and ends with a 90-day plan. Download it to see where your sector stands against its peers, and to take a citable baseline into your next board or NIS2 discussion.

Whitepaper. 28 pages, version 1.0, June 2026.

Migrating to Post-Quantum Cryptography

A practical guide to moving to post-quantum cryptography. It covers what a quantum computer breaks and when, which algorithms NIST has standardised, how far the public web has moved, and how to order an inventory and migration around data that must stay confidential longest. Download it as the reference for your own post-quantum roadmap, with the standards, data, and order of work in one place.

Whitepaper in French. 17 pages, March 2026.

Microsoft 365 in Swiss public administrations

For cantons, communes, and public hospitals using Microsoft 365. Since Privatim's resolution of 18 November 2025, sensitive data may go to an international cloud only if the public body encrypts it and the provider cannot reach the keys. The paper explains which Microsoft options fail that test and two set-ups that pass. Download it to bring a clear, sourced position to your data-protection officer or cantonal authority.

Whitepaper in German. 17 pages, April 2026.

Microsoft 365 in Swiss public administrations

The German edition of the French whitepaper for Swiss public bodies. Same sources, same conclusion. For data covered by the Privatim resolution, keys held by Microsoft, including Bring Your Own Key, are not enough. The two options are keeping those files on local systems, or Double Key Encryption with the second key outside Microsoft. Get it if your team works in German and needs the full argument and comparison table.

Research report. 10 pages, July 2026.

Quantum Compliance in Switzerland and the EU

Two parts. A summary of recent post-quantum supervisory items, including FINMA Guidance 05/2026, which expects a cryptographic inventory and roadmap by mid-2027. And a measurement of 21 anonymised Swiss financial institutions. Their average score is 62, eight use hybrid ML-KEM, and twelve are classical only. Download it to see how Swiss peers score, and use the eight-week inventory outline to get ahead of FINMA's mid-2027 expectation.

Research report. 14 pages, September 2026.

UK Financial Services: Quantum Readiness Index

A measurement of 34 UK banks and 10 market-infrastructure and insurance firms, scored from their public websites in September 2026. UK banks average 57, against a global banking average of 54, and rank 11th of 49 markets. 13 of the 34 banks use hybrid ML-KEM. Names are anonymised, and the scoring method is in the appendix. Download it to benchmark your institution against UK and global peers ahead of the NCSC 2028 milestone.

Briefs

2

4 pages, 2025. For EU financial entities.

DORA Compliance Brief

What DORA's Article 9 requires for encryption and key management, and how DuoKey's controls map to each requirement. DORA has applied since 17 January 2025, with fines of up to €15 million or 2 percent of annual turnover. Get the brief to check your encryption controls against Article 9, one paragraph at a time, before your supervisor does.

Monthly brief, edition 02. 10 pages.

Quantum Compliance Pulse, August 2026

A summary of the month's post-quantum developments for Swiss and EU financial institutions. It covers a DigiCert survey of 1,001 firms in the US, UK, and Australia, a FINMA survey of 60 Swiss institutions, FINMA Guidance 05/2026, and four upcoming dates. For each date it says whether it is a law, a roadmap, or supervisory guidance. Get it to brief your risk committee in ten pages instead of reading every source yourself.

Case study

1

Case study. 1 page.

Volkswagen: OTA that stays under OEM authority

How Volkswagen Group cut the cloud egress cost of over-the-air updates to more than 10 million vehicles. DuoKey's key service was placed on edge servers at dealers, and signing stayed with the manufacturer. Reported results are a 95 percent cut in egress cost and a three-month payback. Get the one-page case study to see the architecture behind those numbers.

Product sheets

12

Product sheet. 4 pages.

DuoKey for KMS

An overview of DuoKey's key management service. Keys are split across separate servers using multi-party computation, so no single server or cloud provider holds a whole key. It covers AWS, Azure, and Google Cloud, HSM integration, and the SaaS deployment. Get the sheet if you need to explain to your team or auditor why keys should not sit with the provider that holds the data.

Product sheet. 4 pages, 2025.

DuoKey for Salesforce

How to use your own encryption key with Salesforce Shield Platform Encryption. It covers three Salesforce options, Bring Your Own Key, External Key Management, and Cache-Only Key Wrapper, plus storing the key in an HSM or splitting it with multi-party computation. Download it to compare the three options side by side and pick the one that fits your compliance requirements.

Double Key Encryption product sheet. 4 pages.

DuoKey for Microsoft 365

How Double Key Encryption works in Microsoft 365. Content with a sensitivity label needs two keys to open. Microsoft holds one, and you hold the other outside Microsoft. It covers the flow with Microsoft Purview, the key types, and running DuoKey on premises or as SaaS. Get the sheet if you have to show a regulator or customer that specific Microsoft 365 content is out of Microsoft's reach.

External Key Store product sheet. 4 pages.

DuoKey for AWS XKS

How to keep the root key for AWS data outside Amazon using the AWS KMS External Key Store. Applications keep calling AWS KMS, and KMS forwards key operations to DuoKey. It covers envelope encryption, Kubernetes deployment, and which AWS services work without changes. Download it for the architecture diagram and a clear answer to "can AWS decrypt our data?"

Extensible Key Management product sheet. 4 pages.

DuoKey EKM for SQL

How to keep the master key for SQL Server Transparent Data Encryption outside the database server. The sheet shows the key hierarchy from master key to database encryption key, cloud and on-premises deployment, and examples for finance, healthcare, and retail. Get it if a stolen server image or backup today would carry both your data and the key that opens it.

Product sheet. 4 pages.

DuoKey for ServiceNow

How to replace ServiceNow's system-generated key with your own key for Column Level Encryption, using the Key Management Framework. It covers key lifecycle (rotation, revocation), MPC and HSM storage, and examples for healthcare, financial services, and government. Download it to see how to take control of the key for your most sensitive ServiceNow fields without changing how people work.

Data sheet. 2 pages, 2025.

DuoKey for Genesys

For organisations moving their contact centre to Genesys Cloud while keeping control of the encryption keys. It describes DuoKey's Local Key Manager (LKM) for Genesys Cloud, and the choice of storing keys on premises, in the cloud, or both. Get it before your migration so key ownership is settled up front, not after an audit finding.

PKI and certificate management sheet. 4 pages, with a customer case.

DuoKey PKI

How DuoKey automates certificate issuance, renewal, and expiry tracking, with signing keys protected by multi-party computation. It includes an anonymised case of an automotive manufacturer managing certificates for a connected fleet under UN R155. Download it if an expired certificate has ever caused you an outage, or if you are afraid one will.

Data sheet. 2 pages.

DuoKey for Varonis

How files that Varonis classifies as sensitive get Double Key Encryption automatically. Microsoft holds one key and DuoKey holds the other. A diagram shows the path from classification to the encrypted file. Get it to turn your existing Varonis classification into actual protection, with no change for users.

Tri-Secret Secure data sheet. 1 page.

DuoKey for Snowflake

For Snowflake Business Critical and VPS customers who want a key that neither Snowflake nor the cloud provider holds. With Tri-Secret Secure, decryption needs three keys, and DuoKey holds yours. The sheet shows the architecture and crypto-shredding for data exit. Download the one-page overview to brief your data platform team in a few minutes.

Automotive solution sheet. 4 pages, 2024.

DuoKey for Automotive

The main attack paths on connected vehicles (V2V, V2I, ECUs, the CAN bus, OBD) and the key-management controls that address them. Those controls are PKI, code signing, UDS security access, over-the-air updates, secure boot, and remote attestation. It includes a published CAN-injection theft through a headlamp. Get it to map each attack path to a control ahead of your next R155 or R156 assessment.

Post-quantum solution sheet. 4 pages, 2024.

Quantum-Ready Encryption

Why data encrypted today with RSA or elliptic-curve keys is at risk once quantum computers mature, and what NIST's 2035 transition deadline means. It describes DuoKey's post-quantum key service, finding quantum-vulnerable keys, and migrating without stopping current systems. Download it for a short explanation of quantum risk that you can share with leadership.

Discuss the decisions that matter most to your security programme.

Tell us where control is difficult today. We will help you identify a practical next step.

Book a call See the platform