---
title: "Cloud Data Control - Feature Comparison Matrix"
slug: "could-data-control-feature-comparison-matrix"
updated: 2026-05-26T04:16:32Z
published: 2026-05-26T04:16:32Z
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.fortanix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Cloud Data Control - Feature Comparison Matrix

## 1.0 Introduction

The following table presents a feature comparison matrix for the Fortanix Cloud Data Control solutions, including Azure Standard and Premium Key Vaults, Amazon Web Services (AWS), and Google Cloud Platform (GCP).

| Features | Azure Standard Key Vault | Azure Premium Key Vault | Amazon Web Service (AWS) | Google Cloud Platform (GCP) | Oracle Cloud Infrastructure (OCI) |
| --- | --- | --- | --- | --- | --- |
| Key generation from Fortanix DSM | Yes | Yes | Yes | Yes | NA |
| Key import from Fortanix DSM | Yes | Yes | Yes | Yes | Yes |
| Key enable or disable | Yes | Yes | Yes | Yes | Yes |
| Manual key rotation | Yes | Yes | Yes | Yes | Yes |
| Key deactivation | Yes | Yes | Yes | NA | NA |
| Set key expiry date | Yes | Yes | Yes | NA | NA |
| Delete key from Fortanix DSM - If the keys are purged (Azure) - If the keys are deleted (AWS) | Yes | Yes | Yes | No (Only supported using destroy API and not DSM UI) | NA |
| Key rotation using key rotation policy | Yes | Yes | Yes | Yes | Yes |
| Key rotation policy with rotate copied keys | Yes | Yes | Yes | Yes | Yes |
| Key rotation policy with deactivate original key | Yes | Yes | NA | NA | NA |
| Add, update, or delete key tags | Yes | Yes | Yes | NA | Yes |
| Bring Your Own Key (BYOK) | Yes | Yes | Yes | Yes | Yes |
| Rotate to Fortanix DSM key | Yes | Yes | Yes | Yes | Yes |
| Sync keys | Yes | Yes | Yes | Yes | Yes |
| Schedule key deletion (AWS, OCI) Soft-delete (Azure) | Yes | Yes | Yes | NA | Yes |
| Cancel key deletion (AWS, OCI) Recover deleted key (Azure) | Yes | Yes | Yes | NA | Yes |
| Reimport key material | NA | NA | Yes | NA | NA |
| Delete key material | NA | NA | Yes | NA | NA |
| Purged deleted key | Yes | Yes | NA | NA | NA |
| Restored purged key | Yes | Yes | NA | NA | NA |
| AWS KMS-side key rotation | NA | NA | Yes | NA | NA |
| Rotate multi-region keys | NA | NA | Yes | NA | NA |
| AWS BYOK native key rotation | No | No | Yes | No | No |