DuoKey Documentation

DuoKey is a Swiss key-management platform built on Multi-Party Computation (MPC). It gives you exclusive control of your encryption keys across Microsoft 365, databases, cloud KMS, PKI and more — without a single point of failure, and without dedicated HSM hardware.

Where to start

• Double Key Encryption (DKE) — customer-controlled encryption for Microsoft 365.
• Why DuoKey Software-Defined HSM? — how MPC compares to traditional HSMs.
• DuoKey Cockpit — the platform: vaults, HSM/KMS backends, PKI and secret managers.
• Product guides — SQL EKM, Salesforce BYOK, Oracle TDE, AWS XKS, HashiCorp Vault, OpenBao, and more (see the sidebar).

Good to know

• Performance and availability figures in these docs are indicative design targets, not independently benchmarked guarantees.
• Compliance framework names (SOC 2, ISO 27001, PCI DSS, HIPAA, GDPR) indicate alignment with those programs, which DuoKey helps you address; certification of your deployment is performed by your own auditors.
• Vendor HSM certifications (e.g. Securosys FIPS 140-2 Level 3) are the respective vendors' certifications.