Defined term / workflow

BYOK

Bring-your-own-keys — tenant-managed encryption keys for regulated workloads.

Definition

Tenants that require it can bring their own KMS keys. Encrypted storage (packages/storage) reads keys from the tenant scope before encrypting tenant-restricted or secret-class payloads.

Related doc

Multi-Tenancy

Org / tenant isolation, admin actions, review workflows, and BYOK encryption for regulated workloads.

Open doc