Topic
Practices and systems for encrypting stored and transmitted data and controlling who holds the keys, including customer-managed and vendor-held key models.
CoreWeave says key custody is what keeps enterprise AI projects sitting in security review, so its new encryption service leaves the key in tooling the customer already runs and takes the provider off the decrypt list.
Reality
Amazon's Throw Away the Key setting stops Ring from holding video keys permanently. Instead its cloud borrows a camera's key for up to 24 hours at a time so smart alerts, video search and descriptions keep working.
Reality
AWS's multi-Region replication copies a Cognito pool's configuration, hashed credentials and IdP settings into one other Region with eventual consistency. Only the primary accepts writes, so failover planning becomes a per-path decision.
Reality
Ring's new TAKE encryption deletes its own copy of video keys within 24 hours, reshaping what law enforcement can legally obtain from the cloud.
Reality
Records for about 5,000 applicants were encrypted and still exposed, because the key travelled in the API response. The warning about that API arrived a month early.
Reality
One vendor reports buyer questionnaires growing at least tenfold, now demanding customer-controlled identity, exportable logs, data residency and a no-AI-training promise. The build comes before the signature.
Reality
Coverage extending to temporary cluster data removes the exact objection security reviewers used to block Spark workloads. The platform did not change much; the exception request did.
Reality