# BYOK

> Bring Your Own Key in Pachca: your company controls the encryption keys through its own KMS for maximum protection of company data

Источник: https://pachca.com/en/glossary/byok

BYOK (Bring Your Own Key) is an advanced security setup where your company controls the encryption keys. Here's how it works:

- The master key lives in your KMS (Yandex Cloud KMS, Cloud.ru, HashiCorp Vault or Deckhouse Stronghold)
- Every message is encrypted with its own unique key (DEK)
- Pachca has no access to your keys
- If you revoke the key, the data becomes inaccessible

BYOK is built for organizations with strict security requirements: banks, government agencies, healthcare. It's available on the Corporation plan.

Learn more in the Help Center

[Read the article →](https://pachca.com/en/help-center/administration/byok)