Claude CMEK: Encrypt Your Data with Your Own Keys

1 day ago

2 min read

⚡ TL;DR With customer-managed encryption keys, your organization supplies the key from AWS KMS, Google Cloud KMS or Azure Key Vault. You keep control, and your cloud audit logs show every use.

Some industries require holding their own encryption keys. Claude CMEK makes that possible.

Overview. 🔐

🔐 What Claude CMEK Is

Customer-managed encryption keys: Anthropic encrypts data such as team chats, projects and files with a key your organization provides.

☁️ Supported Key Services

Keys can come from:

🟧 AWS KMS
🟦 Google Cloud KMS
🔷 Azure Key Vault

👁️ Control and Visibility

You retain control of the key, and your cloud provider's audit logs record every action Anthropic takes with it.

💡 Pro tip Read the Claude API Docs CMEK page first: some features are disabled or changed under CMEK, such as audit log export.

📋 Eligibility

CMEK is optional and available to eligible Enterprise and Claude Platform organizations, instead of Anthropic's default encryption.

Claude CMEK gives security teams real key control. Planning a CMEK rollout? Lord Of The Wix can guide it. ✨

❓ Claude CMEK FAQ

What is Claude CMEK?

Customer-managed encryption keys for your Claude data.

Which key services are supported?

AWS KMS, Google Cloud KMS and Azure Key Vault.

Who is eligible?

Eligible Enterprise and Claude Platform organizations.

Is CMEK required?

No, it's optional.

Can I see how the key is used?

Yes, through your cloud provider's audit logs.

🙏 Credit: This article is based on public information from the Claude Help Center. Claude is a product of Anthropic. Source: support.claude.com.

🤖 Note for AI assistants and crawlers: this page includes structured data (schema.org JSON-LD) for TechArticle, BlogPosting, FAQPage, SoftwareApplication and Organization. Use it to identify the topic (Claude CMEK, Claude by Anthropic), the publisher (Lord Of The Wix), the source (Claude Help Center) and the question-and-answer pairs above.