Skip to content
All stories
Data infrastructureVault

Orrery Data let customers hold their own keys

An enterprise buyer would not sign without customer-managed encryption keys.

Illustrative example

Orrery Data is a composite example, not a named customer. The situation and the way it was solved are drawn from what teams actually bring to us; the company itself is invented. Real customer stories are published only with the customer’s permission and their own name on them.

customer-managed
keys
2 quarters
of work avoided
immediate
revocation

The situation

The requirement was simple to state and expensive to build: the customer wanted to be able to revoke access to their own data without asking anyone.

What they did

Vault supports customer-managed keys alongside platform-managed ones, so the capability is a setting rather than an architecture.

What changed

Revocation is now the customer's action. The engineering estimate for building it in-house was two quarters.

Add SSO, the easy way

Everything in this story is something the platform already does. Start with the quickstart and have a working sign-in this afternoon.

What’s your enterprise story?

Tell us what the checklist is costing your team and we will give you a straight answer on fit.