Most enterprises store critical data in cloud platforms like Microsoft 365 and Salesforce, where it moves across services and geographic boundaries, creating security and compliance exposure. Native Cloud Service Provider key management alone fails to address today's complex data sovereignty risks.That’s where DuoKey, powered by its MPC-native Key Management System (KMS), comes in - augmented by Blockdaemon’s Builder Vault, to deliver verifiable cryptographic assurance.
DuoKey & Builder Vault?
DuoKey delivers true data sovereignty through advanced key management that centralises control, implements zero-trust access and maintains complete separation between your data and encryption keys from cloud providers. Unlike traditional HSMs, which are costly and hardware-bound, DuoKey’s KMS provides software-based deployment, built on secure Multi-Party Computation (MPC) for advanced encryption key protection
This MPC architecture ensures that no single server ever reconstructs the full key while delivering the same grade of protection that you’d expect from HSMs. Under the hood, DuoKey leverages Blockdaemon’s Builder Vault as one of its MPC nodes, providing a secure, auditable, and cryptographically sound foundation. The result is an elastic, hardware-free solution built to scale and protect sensitive data across your cloud environments.
Why Choose DuoKey and Builder Vault?
DuoKey offers cloud-native MPC KMS backed by Builder Vault for Microsoft 365 and Salesforce.
- Microsoft 365: Store your most sensitive data on the Azure cloud and maintain compliance with regulatory compliance with DuoKey MPC-based Double Key Encryption (DKE) and Builder Vault.
- Salesforce: Enhance data security and control over your Salesforce data with DuoKey’s Bring Your Own Key (BYOK) and CacheOnly Key Wrapper solutions.
Unlike simple wrappers around legacy systems, DuoKey's MPC infrastructure is a native, scalable platform. Builder Vault functions as a secure MPC node within this system, while DuoKey manages orchestration, policy logic, and system integrity.
Get Started
MPC-powered encryption secures your data without the traditional hardware cost or complexity. DuoKey and Blockdaemon offer flexible subscriptions so you can scale encryption as your needs grow. Clients remain compliant by holding their own key and meeting jurisdictional rules.
Blockdaemon and DuoKey will extend their services beyond Microsoft 365 and Salesforce, with ServiceNow and Genesys on the roadmap.
Book a call with the Blockdaemon team to explore how Builder Vault can support your encryption needs when protecting your critical data in Microsoft 365 and Salesforce.
