Enterprise + Sovereign AI

What does BYOK for AI require from an enterprise?

BYOK for AI means you supply and control the keys that protect your data, typically through a cloud KMS or on-premise HSM, while the vendor performs cryptographic operations through envelope encryption. Requiring it means accepting operational duties: key availability becomes your responsibility, revocation is a live control you can exercise, and rotation, backup and access policies must be designed before go-live.

Key facts

Key optionsAWS KMS, Azure Key Vault, HashiCorp Vault or on-prem HSM
Encryption modelAES-256 at rest with envelope encryption and per-region KMS
In transitTLS 1.3
Deployment modelsCloud, VPC, on-prem and air-gapped tiers all support key separation
Access controlSSO/SCIM, RBAC at workspace, role and resource level
AuditKey operations and data access recorded and exportable to SIEM
Compliance postureSOC 2 Type II and ISO 27001 readiness in progress (not yet certified); GDPR and PDPL alignment
SLA99.9% uptime on paid plans; Enterprise 4-hour support SLA — see /legal/sla

TL;DR

  • BYOK gives you a kill switch: revoke the key and access to protected data stops.
  • Your key availability becomes your availability — plan KMS redundancy and incident response.
  • Use envelope encryption so you rotate small data keys, not the master key on every operation.
  • Test revocation and rotation in staging; an untested kill switch is not a control.
  • Separate key permissions from platform administration so no single role holds both.

How it works, step by step

  1. Identify which data classes require customer-managed keys (usually regulated personal data and secrets).
  2. Choose the key store: cloud KMS, HashiCorp Vault, or HSM, aligned to your residency requirements.
  3. Define key hierarchy and policies: master key, data keys, rotation cadence, backup and recovery.
  4. Separate duties so platform admins cannot export keys or grant themselves key access.
  5. Implement monitoring and alerting on key operations; export logs to your SIEM.
  6. Test revocation, rotation and recovery in a staging environment.
  7. Document the operational runbook and rehearse it as part of incident response.
1Identify which dataclasses requirecustomer-managed2Choose the keystore: cloud KMS,HashiCorp Vault, or3Define keyhierarchy andpolicies: master4Separate duties soplatform adminscannot export keys5Implementmonitoring andalerting on key6Test revocation,rotation andrecovery in a

Original data

AES-256 at resEncryption modelTLS 1.3In transitSOC 2 Type II Compliance posture99.9% uptime oSLASource: Plugsky facts table · updated 2026-09-25

Try it yourself

Open the sovereign AI readiness score →

How BYOK works in practice

The standard pattern is envelope encryption. Your master key lives in your KMS or HSM and never leaves it. The platform encrypts each object — prompts, completions, embeddings, logs — with a data key, then wraps that data key with your master key. Decryption requires a call your key policy authorises, which is why revocation is meaningful: disable the key and protected data becomes unreadable. Plugsky supports customer-managed keys through AWS KMS, Azure Key Vault, HashiCorp Vault and on-prem HSM, alongside per-region KMS for its own encryption.

The responsibilities you accept

  • Availability: if your key store is unavailable, protected workloads stop — design redundancy.
  • Recovery: losing a master key can mean permanent data loss; escrow and backup procedures are mandatory.
  • Rotation: schedule re-wrapping of data keys and verify performance impact.
  • Access governance: split key administration from platform administration.
  • Audit: monitor key usage and export records to your SIEM.

Questions to ask a vendor

  • Which data classes can be protected with customer keys, and which cannot?
  • Is the key used per tenant, per workspace, or per object?
  • What exactly happens when we revoke a key — what breaks, and how quickly?
  • Are key operations logged with actor, operation and timestamp?
  • Can vendor staff access plaintext with our key policy in place?
  • Does key residency stay in the same region as the data?

Common pitfalls

The biggest is checkbox BYOK: enabled, never tested, with no plan for rotation or recovery. The second is operational fragility — a single KMS region with no failover. The third is permission sprawl, where platform administrators can also manage keys, defeating the separation that made BYOK valuable. The fourth is mismatched jurisdiction: keys stored in one region protecting data in another undermines the residency story you are trying to tell.

Honest comparison

CapabilityPlugskyHyperscaler AI platformBuilding in-house
Customer-managed keysAWS KMS, Azure Key Vault, Vault, on-prem HSMCloud KMS integrationYou operate the HSM
Encryption at restAES-256 envelope with per-region KMSCloud provider encryptionYour implementation
Key auditKey and access events exportable to SIEMNative cloud auditYou build it
Revocation controlAvailable through your key policyAvailable through cloud KMS policyFully in your hands
Residency alignmentRegion-locked planes for data and keysRegion options per serviceYour design
CertificationsSOC 2 / ISO 27001 readiness in progressCompleted audits in many regionsYour own programme

Frequently asked questions

Does BYOK mean the vendor never sees my data?

No. It means you control the keys that protect stored data and can revoke access. Processing still happens in memory, so contractual and access controls remain essential.

Which key stores does Plugsky support?

AWS KMS, Azure Key Vault, HashiCorp Vault and on-prem HSM are documented for customer-managed keys, alongside per-region KMS for platform encryption.

What happens if we lose a key?

Protected data may be unrecoverable. Define escrow, backup and break-glass procedures before enabling BYOK, and test recovery in staging.

How does key rotation work?

Rotate the master key on schedule and re-wrap data keys. Test the procedure for performance and completeness, and log each rotation event.

Is BYOK required for compliance?

Not universally, but it is common for regulated data and for sovereignty requirements. Check what your regulator or auditor expects for the specific data class.

Can keys live in a different region from the data?

They can, but it usually weakens your residency position. Keep keys and data in the same jurisdiction unless your counsel advises otherwise.

Does BYOK work with on-prem and air-gapped tiers?

Yes — on-prem HSM integration is supported, and air-gapped deployments keep key operations entirely inside your perimeter.