I'm having a question about the following: is it possible in general to store data on a cloud platform, specifically either AWS, Azure or Google Cloud, without the cloud provider itself being able to access the data at any time? Similar to Proton's "Zero Access Encryption"?

I've seen that data at rest encryption is possible with associated Key Management Services, but the keys eventually still reside in the control of the respective cloud provider, aren't they?

Is it possible to avoid that?

  • you can encrypt the data, before storing it and after receiving decrypt it againa.
    – nbk
    Commented Apr 8 at 8:58
  • @nbk Client-side encryption, right? Therefore, any attempts of performing calculations on the data in the cloud becomes void, correct? Does this approach have caveats for multiple devices in sync, e.g. desktop and mobile? Commented Apr 8 at 9:50
  • Yes only client side, as every communication can be read by the provider. Using Maui and c# you can write a program that will run every where
    – nbk
    Commented Apr 8 at 10:09
  • It depends. You can host the encrypted data and the keys at different providers, see KMS Providers Commented Apr 8 at 12:10


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Browse other questions tagged or ask your own question.