trustedkeep.io

What It Is

TrustedKeep is a data security platform for cloud and data center environments, with a core focus on protecting customer data, corporate reputation, and sensitive information from both external and internal threats. Rather than acting as a traditional perimeter firewall, it focuses on the data objects themselves, providing object-level encryption, key management, access control, and auditing for object storage. The source material explicitly states that it can run as a transparent proxy for Amazon S3.

Core Capabilities

In terms of protection model, TrustedKeep emphasizes object-level encryption with “a unique key for every object.” A TrustedKMS cluster can manage billions of keys and process thousands of transactions per second. Access control is based on separation of duties: TrustedGateway administrators are responsible for access-control decisions but cannot access the data; TrustedKMS administrators manage the KMS cluster but do not make access-control decisions and also cannot access the data. Keys do not leave the TrustedKeep security boundary. For auditing, every operation is logged; logs can be exported to Elastic Stack, and notifications can be generated when objects are stored, read, or deleted.

Deployment, Integration, and Scaling

For deployment, TrustedGateway is a stateless component that can scale with workload demand. TrustedKMS can be distributed across data centers or AWS Regions, providing consistency within a single data center or region and eventual consistency across boundaries. Its integration capabilities are mainly centered on the AWS ecosystem: it is compatible with the Amazon S3 API and can encrypt objects on write as a transparent proxy. It is also compatible with Amazon KMS and can be used together with customer-managed keys, or CMKs, for more sensitive workloads.

Pricing and Limitations

The source material does not disclose pricing model, editions, trial availability, payment methods, SLA, or compliance certifications, so procurement teams will need to contact sales for confirmation. Its strengths include fine-grained encryption, clear separation of duties, audit integration with Elastic Stack, and support for high availability and geographic distribution. The downsides are that the publicly available information is mostly a technical overview, with little detail on the actual management interface, deployment complexity, certifications, customer references, or costs. Its compatibility beyond AWS/S3 scenarios is also unclear.

Who It’s For and Access from China

TrustedKeep is better suited to enterprise security, cloud platform, and compliance teams that hold large volumes of S3 object data, PII, or sensitive business data and want to reduce risks from cloud storage misconfiguration. The source material does not specify access conditions from mainland China, so network connectivity, payment options, and local support are all unknown. If domestic compliance, RMB payment, or local cloud integration is required, alternatives to evaluate include Alibaba Cloud KMS, Tencent Cloud KMS, Huawei Cloud Data Encryption Service, as well as HashiCorp Vault, Thales CipherTrust, and Fortanix.