Veeam Data Cloud Vaults deployed on Azure now support BYOK (Bring Your Own Key) encryption for greater control over the encryption of your backup data. With BYOK encryption, you host and manage your own encryption keys in Microsoft Azure Key Vault. Veeam Data Cloud uses your key to encrypt backup data, but never stores it, and you can revoke access at any time.
Keeping keys in your own Azure Key Vault helps satisfy regulatory and internal security requirements (e.g., data sovereignty, separation of duties) that mandate the customer to retain custodianship of encryption keys.
This feature is available on request. To enable encryption key management in your Veeam Data Cloud organization, contact Veeam Customer Support.