BYOK

BYOK (Bring Your Own Key) is an advanced security setup where your company controls the encryption keys. Here's how it works:

• The master key lives in your KMS (Yandex Cloud, HashiCorp Vault)
• Every message is encrypted with its own unique key (DEK)
• Pachca has no access to your keys
• If you revoke the key, the data becomes inaccessible

BYOK is built for organizations with strict security requirements: banks, government agencies, healthcare. It's available on the Corporation plan.