What is BYOK (bring your own key)?
BYOK, or bring your own key, lets a customer supply or control the encryption key that protects their data inside a vendor's service. The related term CMK means customer-managed key. If the customer revokes the key, the vendor can no longer read that data.
What the buyer is really asking
Buyers want to know if they can hold or revoke the keys that protect their data inside your service. This is about a product feature, not your security posture. If you do not offer it, a plain no is a fine answer.
Other ways buyers ask it
Every one of these wants the same answer:
- “Do you support bring your own key (BYOK)?”
- “Can customers manage their own encryption keys?”
- “Can we revoke access to our data by revoking a key?”
Evidence to have ready
- Product documentation describing key options, if the feature exists
- A roadmap statement or plain no, if it does not
How Tyrvar answers this
Tyrvar treats every wording above as one question. You write the answer once, attach the evidence, and revisit it when your setup changes. Each buyer gets that approved answer no matter how their questionnaire words it. If you have not answered it yet, Tyrvar flags the question for you and does not make something up. Try it on your own questionnaire.