Keep the key to call recordings

DuoKey integrates with Genesys Cloud Local Key Management, so contact-centre features keep running while key custody stays with you.

Local Key Management

Genesys uses keys you host, through its LKM integration.

Your jurisdiction

Key fragments stay on-premises or in the jurisdiction you choose.

Full traceability

Every key operation logged: who, what, when and why.

The contact centre in the cloud.

Move contact-centre workloads to Genesys Cloud while the encryption keys protecting customer data stay under your authority.

Features keep running for agents and supervisors.
Supports FINMA, DORA, HIPAA and GDPR reviews.

Local Key Management, done with MPC.

Genesys Local Key Management calls your key service; DuoKey answers it while the keys stay in your controlled environment.

Even if data resides in Genesys Cloud, keys do not.
Set up through the Genesys LKM integration.

Shares that are useless alone.

Keys are split into shares with multi-party computation. Operations run without ever assembling the full key.

Zero-trust architecture for key custody.
No single administrator can act alone.

Prove it to auditors.

A complete audit trail shows that no unauthorised access occurred and demonstrates due diligence.

Every operation with full traceability.
One console for all your SaaS keys.

Key features

Genesys LKM

Local Key Management integration for Genesys Cloud.

Distributed key storage

Key fragments in the locations you choose.

Data sovereignty

Keys stay in your controlled environment.

Zero-trust custody

MPC shares, never assembled.

Complete audit trail

Who, what, when and why for every operation.

Straightforward integration

Contact-centre features keep running.

Proof in practice

Where teams deploy this

Financial Services

Secure Cloud Data Storage for Financial Services

Protect Customer Data and Ensure Compliance with DuoKey's Secure Cloud Storage for the Financial Industry

Read use case

Deep dives

Field guides for your programme

Data Sovereignty for Enterprise SaaS: Microsoft 365, AWS & Customer-Managed Keys

Data sovereignty in enterprise SaaS: how customer-managed keys for Microsoft 365 and AWS change who can be compelled to unlock your data.

Read guide

You're Encrypting Your Data. But Who Controls the Keys?

Encrypted is not the same as controlled: a plain-language brief for leaders on who can unlock cloud data when a provider holds the last key.

Read guide

Compliance

Frameworks this product supports

DORA

ICT risk management and resilience for the EU financial sector, with encryption and keys you can prove you control.

Open framework

GDPR

Article 32 security, breach risk and transfers, encryption that is meaningful because you hold the keys.

Open framework

HIPAA

Technical safeguards for ePHI, encryption and key management you can stand behind in a BA audit.

Open framework

Trust

Assurance and customer programmes

ISO

ISO/IEC 27001:2022

Certified information security management system.

Security at DuoKey

Trust Center

Security and compliance documents for due diligence.

Open Trust Center

Customer programmes

Volkswagen · Automotive

OTA that stays under OEM authority.

DuoKey keeps PKI and signing with one of the world's leading automotive manufacturers, including at the edge, on the platforms already in production.

View case study

ICRC · Humanitarian

Beneficiary data sealed by keys the ICRC controls.

RedSafe, the ICRC's digital platform for people affected by conflict, encrypts beneficiary data with HashiCorp Vault. DuoKey auto-unseals Vault with an MPC-protected key under ICRC control, so no operator holds unseal keys and no hosting provider can open the data.

View case study

Swiss energy operator · Energy · Critical infrastructure

Board papers protected with a key Microsoft does not hold.

A Swiss critical-infrastructure operator in the energy sector uses DuoKey Double Key Encryption to keep its board's most sensitive documents in Microsoft 365, with the second key under its own control.

View case study

Major German bank · Banking

Microsoft 365 for a bank, with the key in the bank's hands.

A major German bank uses DuoKey Double Key Encryption to keep confidential client and internal data in Microsoft 365, while the second key stays outside Microsoft.

View case study

Swiss fintech bank · Banking · Digital assets

Blockchain transactions signed without a complete key ever existing.

A leading Swiss fintech bank secures its blockchain transactions with DuoKey MPC: signing keys are split into shares, and a transaction is signed only when policy and approvers agree.

View case study

Automotive manufacturer · Automotive · PKI

PKI and certificate lifecycle, automated end to end.

An automotive manufacturer uses DuoKey to run its PKI and automate the certificate lifecycle across IT, plants and connected services, so an expired certificate no longer stops the business.

View case study

OpenBAO Migration · Secrets management

Vault to OpenBAO Migration

Escape HashiCorp Vault Enterprise's per-token licensing and BSL vendor lock-in. Migrate to OpenBAO with DuoKey SD-HSM MPC auto-unseal and DuoKey Managed OpenBAO Service: same API, zero code changes and up to 60-80% lower TCO (estimate; depends on tokens, support and HSM estate).

View case study

Genesys Cloud, with the key kept at home.

See Local Key Management with keys Genesys never holds.

Request a demo Start a free trial

Products

Check out the other DuoKey products

Microsoft Double Key Encryption (DKE)

Keep Microsoft from unlocking regulated mail, files and Teams content alone, without leaving M365.

View product