# Can I bring my own encryption keys (BYOK)?

On Business and Enterprise tiers, you can register an AWS KMS or HashiCorp Vault key with your tenant through our BYOK API.

General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.

FAQ: [Data residency and trust](https://netsenx.com/en/faq/residency) · https://netsenx.com/en/faq/can-i-bring-my-own-encryption-keys-byok

## Read next

- https://netsenx.com/en/eu-data-residency
- https://netsenx.com/en/compliance

## Related questions

- [Where does NetSenX store customer data?](https://netsenx.com/en/faq/where-does-netsenx-store-customer-data)
- [Does any data leave the EU?](https://netsenx.com/en/faq/does-any-data-leave-the-eu)
- [Is EU data residency enough for GDPR?](https://netsenx.com/en/faq/is-eu-data-residency-enough-for-gdpr)
- [Can NetSenX run on-premises?](https://netsenx.com/en/faq/can-netsenx-run-on-premises)
- [Is an EU region of a US cloud provider enough for data residency?](https://netsenx.com/en/faq/is-an-eu-region-of-a-us-cloud-enough-for-data-residency)