Who holds encryption keys?

Key management follows the contracted cloud class. Customer-managed keys, when required, are a scoped control — not assumed.

Educational and evidentiary material for procurement and IT evaluators. Adapt with your legal, privacy, and information-security counsel. Commercial terms, SLAs, and certificate serials are confirmed in the bid — not invented on this page.