Customer Managed Keys, or CMK, is a cloud architecture that gives customers ownership of the encryption keys that protect some or all of their data stored in SaaS applications.

CMK is known by many names, including EKM, BYOK, CSK or BYOE. It has these characteristics:

  • Per-tenant encryption for some or all customer data.
  • Your customer (tenant) manages a master key or keys needed for decryption.
  • Your customer can independently monitor all data access.
  • Your customer can independently revoke access at any time.

CMK: What Architects Need to Know

We're committed to your privacy. IronCore uses the information you provide to contact you with technical information to architect privacy into your products. You may unsubscribe at any time.