CoreWeave Inc. has introduced Remote Key Encryption, a service designed to encrypt customer data on its infrastructure without the provider holding the encryption keys. The process occurs client-side, utilizing the customer's existing secrets management systems or hardware security modules.
The service allows customers to manage key rotation, expiration, and revocation through their own established infrastructure. CoreWeave stated that its approach to key lifecycle management is currently patent pending and relies on standard encryption algorithms.
Remote Key Encryption will enter limited availability later this year, with IBM Corp. serving as the launch partner. The initial release supports data protection on CoreWeave AI Object Storage, compatible with HashiCorp Vault and other systems supporting the Key Management Interoperability Protocol.
The company also manages access through its Support Access Management controls, which require explicit customer permission for engineer access. Additionally, CoreWeave integrates with identity providers like Microsoft Entra and Okta to synchronize user provisioning across its services.
