Contact Us Book a call

Products

Multi-Cloud Data Encryption Products

Protect your sensitive data and comply with regulatory frameworks with DuoKey's advanced encryption products.

Book a call See the platform

Duokey products

Built With Security And Privacy In Mind

DuoKey data encryption products protect sensitive information on the platforms you already run, support regulatory frameworks such as NIS2, DORA, GDPR and HIPAA, and keep key control with you across cloud environments.

Data Encryption

Discover our family of security products

Microsoft Double Key Encryption (DKE)

[DuoKey for Double Encryption (DKE) provides distributed key management with MPC technology and zero-trust access controls](https://appsource.microsoft.com/de-de/product/web-apps/duokeysa1610394490053.dke365_saas?tab=overview "DuoKey for DKE"), ensuring Microsoft has no access to your encryption keys while maintaining full data sovereignty and regulatory compliance.

Genesys

Moving contact center operations to the cloud introduces significant regulatory and compliance risks that can halt your Genesys migration or expose your organisation to severe penalties. Many regulations (FINMA, PCI-DSS, HIPAA, TISAX, ISO 27001, VDA ISA, etc) require that data and encryption keys remain within specific geographic boundaries and under exclusive organisational control.

Salesforce Encryption

DuoKey's External Key Management (EKM) for Salesforce enables full control over encryption keys with existing infrastructure integration while meeting compliance requirements (GDPR, HIPAA, CCPA), plus CacheOnly Key Wrapper provides additional security by isolating keys and minimising data exposure.

AWS XKS Encryption

DuoKey for AWS XKS keeps root key material outside Amazon. Applications still call AWS KMS as usual, while cryptographic operations that need the customer key run against DuoKey's external store, so AWS never holds a complete key.

PKI & Certificates Management

Organizations face growing PKI complexity with security risks from expired certificates, compliance burdens and scalability challenges, which DuoKey PKI & Certificate Management addresses through comprehensive automated certificate lifecycle management with MPC-based security.

Servicenow Encryption

Organisations face data protection and compliance challenges in ServiceNow with traditional encryption creating single points of compromise, while DuoKey's MPC-powered key management for ServiceNow's CLE and Edge Encryption provide full encryption key control and eliminates vulnerability points.

OpenBao + DuoKey SD-HSM

OpenBAO is the Linux Foundation fork of HashiCorp Vault: 100% API compatible, so applications keep working with an endpoint change and no code rewrite. Licence is MPL 2.0 under Linux Foundation governance, not BSL 1.1. DuoKey SD-HSM adds MPC auto-unseal and seal wrap without a dedicated HSM or extra cloud KMS. Our EU-hosted managed service is delivered by an OpenBAO co-maintainer and Linux Foundation TSC member. A free migration assessment maps your token count, support tier and HSM estate to a concrete operating cost.

SQL Encryption

DuoKey EKM for SQL provides advanced key management that separates encryption keys from SQL databases, ensuring enhanced security and compliance by managing keys outside the database environment to protect sensitive data from unauthorized access.

AWS S3 Encryption

DuoKey provides flexible Amazon S3 encryption options including server-side and client-side encryption with various key management methods, ensuring regulatory compliance (GDPR, HIPAA) through strong encryption algorithms and maintaining customer control over encryption keys.

Service Encryption for Microsoft 365

Microsoft 365 Customer Key lets you bring your own keys into Microsoft's service encryption path. DuoKey supplies that key service with MPC-backed custody, so Microsoft cannot complete decryption alone and you keep auditable control over who authorises key use.

Varonis

Keep control of sensitive information while Varonis continues discovery and classification. DuoKey for Varonis encrypts classified data automatically, with no change to user workflows. No single party holds the full encryption key. Controls map to GDPR, HIPAA, ISO 27001 and NIS2.

DuoKey Tri-Secret Secure for Snowflake

When you store sensitive data using Snowflake Business Critical or VPS edition, both your cloud provider and Snowflake hold encryption keys to your data. Either party can be compelled by law enforcement or government orders to hand over access without your knowledge or consent. A single compromised key, a rogue insider, or a legal subpoena in another jurisdiction is all it takes to expose your most sensitive records.

Agentic Crypto Agility

Production AI agents still share broad service accounts that cannot be revoked one-by-one. DuoKey issues a cryptographic identity per agent, rotates and revokes under policy, and attests actions so security keeps pace with automation. Pair with the Agentic Wallet (MPC) use case when agents spend or sign.

Key Management System

A KMS your cloud never fully holds. Every key is split across independent shards with multi-party computation, so no cloud provider, operator or compromised host ever holds a complete key.

Oracle TDE

Keep Oracle's TDE master key off the database host. DuoKey's PKCS#11 library bridges Oracle Transparent Data Encryption to an external, tenant-isolated keystore.

PDF Sign

A server-side PDF signing API hosted in DuoKey Cockpit. Your systems send a document hash; DuoKey signs it with a certificate that never leaves the tenant keystore and returns the signature.

Discuss the decisions that matter most to your security programme.

Tell us where control is difficult today. We will help you identify a practical next step.

Book a call See the platform