Thales Luna Key Broker for Microsoft Double Key Encryption provides organizations full control of encryption keys for Microsoft 365, ensuring that sensitive data remains inaccessible to Microsoft or third parties. It uses two keys—a customer key stored in a FIPS 140-2 Level 3-validated Luna HSM and a tenant key in Azure—both required to decrypt data. This design maintains separation between data and encryption keys, enabling compliance with GDPR, HIPAA, and Schrems II. The solution supports flexible cloud or on-premises deployment, offering secure key lifecycle management, centralized control, and integration with Luna Network and Cloud HSMs for enhanced trust and sovereignty.

Join for free to read