---
title: "Can Fortanix employees access my keys?"
slug: "can-fortanix-employees-access-my-keys"
updated: 2026-03-16T17:24:57Z
published: 2026-03-16T17:24:57Z
canonical: "support.fortanix.com/can-fortanix-employees-access-my-keys"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.fortanix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Can Fortanix employees access my keys?

Fortanix does not have access to customer keys. The keys, including the key material and the related metadata, are encrypted both in use and at rest using an encryption key which is derived by the Fortanix-Data-Security-Manager (DSM) process and the Intel® SGX processor, and is unknown to Fortanix.

Fortanix Data Security Manager (DSM) is the world’s first cloud service secured with Intel® SGX. With Fortanix DSM, you can securely generate, store, and use cryptographic keys and certificates, as well as other secrets such as passwords, API keys, tokens, or any blob of data. Your business-critical applications and containers can integrate with Fortanix DSM using legacy cryptographic interfaces (PKCS#11, CNG, and JCE) or using the native Fortanix DSM RESTful interface.

## Related

- [What languages and interfaces are supported by Fortanix Data Security Manager?](/what-languages-and-interfaces-are-supported-by-fortanix-data-security-manager.md)
- [Where do my keys live if I use Fortanix Data Security Manager?](/where-do-my-keys-live-if-i-use-fortanix-data-security-manager.md)