DuoKey for Snowflake
Tri-Secret Secure data sheet. 1 page.
For Snowflake Business Critical and VPS customers who want a key that neither Snowflake nor the cloud provider holds. With Tri-Secret Secure, decryption needs three keys, and DuoKey holds yours. The sheet shows the architecture and crypto-shredding for data exit. Download the one-page overview to brief your data platform team in a few minutes.
Get the download
Tell us where to send the link. A business email is required.
Without Tri-Secret Secure, Snowflake and the cloud provider together hold every key needed to decrypt your data. Either one can be compelled or compromised.
Tri-Secret Secure adds a third key. With DuoKey holding it, split across MPC nodes, nothing can be decrypted without you. And if you ever leave, revoking that key crypto-shreds the data: a clean exit.
One page, with the architecture and DuoKey Cockpit for key policy, access control, and audit. Download it and brief your data platform team in five minutes.
FAQ
Who is this for?
Snowflake customers on Business Critical or VPS editions. Tri-Secret Secure is not available on other editions.
How does the third key connect?
Through DuoKey's proxy for the AWS KMS External Key Store (XKS). The key is split across MPC nodes.
What is crypto-shredding?
Revoking your key so the Snowflake data can no longer be decrypted. The sheet presents it as a clean way to exit.