Encryption keys

Comma encrypts your data at rest by default, using keys it manages in Azure. Customer-managed keys (bring your own key, BYOK) are available on request on Enterprise plans. Contact your account team to scope which data your key covers and to enable it for your tenant.

BYOK is not self-serve - there is no key entry field in the Configuration Center. To start, use Contact us about BYOK on the Retention, storage & records screen, or contact your account lead.