Vault by enclaive is a secrets and identity management solution for cross-cloud environments, designed to centralize key control and facilitate Bring Your Own Key (BYOK) operations. The system detaches key management from the control plane, segregating key, identity, and access management components to execute within an isolated trusted domain. It functions as a vendor-agnostic service that allows organizations to maintain control over encryption keys and enforce custom security controls independently of external cloud providers.
The platform provides centralized key generation, distribution, and lifecycle management while mitigating secret exposure risks during transfer. It leverages hardware-graded security, allowing the CPU, TPM, or HSM to be selected as the security anchor and source of randomness. The solution supports the automation of key rotation policies and is crypto-agile, featuring elasticity to automatically adjust resource scaling in response to fluctuating operational workloads.
