With Bring Your Own Key (BYOK), organizations can encrypt data inside cloud services with their own keys. This applies most frequently to public clouds such as AWS, Google CloudPlatform, Azure, or in cloud service offerings such as Salesforce.
This ensures organizations that their compliance and reporting requirements are fully addressed, with keys being generated within a FIPS 140-2 Level 3 hardware security module (HSM).
