Home
Multimodal Sensing
Text Generation
Agentic Framework
Coding
Compliance
SDKs
API Reference
Release NotesRotation
- DEK rotation: quarterly, transparent re-encryption
- KEK rotation: annual Customers can opt into customer-managed keys (CMK) for the KEK layer.
Key Management
Key Management
Per-tenant data encryption keys and KEK rotation
Each tenant has a unique Data Encryption Key (DEK) for PHI columns. DEKs are wrapped by a Key Encryption Key (KEK) stored in managed KMS (or customer-managed hardware security module).