← Back to glossary
🏦

Key Vault

Encryption

Cryptographic Key Management Key Rotation HSM (Hardware Security Module) Secrets Management

Managed key/secret storage providing access control, audit trails, versioning, and sometimes HSM-backed protection.

Definition

Key vaults store secrets and keys encrypted and enforce policy-based access, auditing, and rotation. Some provide non-exportable HSM-backed keys and key versioning.

In plain English Managed key/secret storage providing access control, audit trails, versioning, and sometimes HSM-backed protection.

Why this matters

Why it matters: Strong key custody is required for encryption to meaningfully protect privacy.

Example

Example: Store customer-encryption keys in a vault with RBAC, require approvals for export, and rotate keys regularly.