DuoKey
DuoKey is a Swiss cloud-security company providing enterprise key management and encryption built on Multi-Party Computation and Fully Homomorphic Encryption, serving regulated customers in financial services, automotive, healthcare, and telecommunications.
- Company typePrivate
- Founded2020
- HeadquartersPrilly, Switzerland
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What DuoKey does
DuoKey SA is a Swiss cloud-security company founded in 2020 and headquartered in Prilly (Lausanne), Switzerland, with a team of 11–50 employees. It builds a cloud-agnostic key-management and encryption platform whose core architecture is a Software-Defined Hardware Security Module (SD-HSM) that distributes cryptographic key shards across independent nodes in different geographies (Zurich, Frankfurt, Paris) using Multi-Party Computation (MPC) secret sharing, combined with Fully Homomorphic Encryption (FHE) for confidential AI/ML on encrypted data. The platform integrates natively with Microsoft 365 (Double Key Encryption, Customer Key), AWS (External Key Store, S3 client-side), Salesforce (EKM/BYOK), ServiceNow (CLE/Edge Encryption), Snowflake (Tri-Secret Secure), Genesys (LKM), Varonis, SQL databases, and HashiCorp OpenBao, alongside an MPC-backed PKI and certificate-lifecycle manager and a Quantum Risk Score (QRS) assessment tool for post-quantum-cryptography readiness.
The product portfolio is sold via annual enterprise subscriptions with quote-based pricing, complemented by professional services for PQC migration and compliance deployments, plus a free QRS assessment used as top-of-funnel demand generation. DuoKey sells primarily through an enterprise field-sales motion aimed at CISOs, CIOs, and compliance officers in regulated industries — financial services, healthcare, automotive, and telecommunications — and supplements this with channel partners (e.g., ARES Algérie), technology-integration listings on Microsoft AppSource and Salesforce AppExchange, and presence at conferences including VivaTech, GISEC Global, MWC/4YFN, LEAP Saudi Arabia, and InCyber Forum. Named customers include Volkswagen, Toyota, Audi, Porsche, Lamborghini, Bentley, Skoda, Seat, the International Committee of the Red Cross, the Global Fund, a Swiss private bank, a large health NGO, and Blockdaemon; the company holds ISO/IEC 27001:2022 (recertified 2024) and TISAX (2025) certifications and positions its offering against GDPR, DORA, NIS2, HIPAA, Swiss FADP, and FINMA 05/2026. As of January 2026, DuoKey is raising a Series A.
DuoKey firmographics
Firmographics- Name
- DuoKey
- Legal name
- DuoKey SA
- Website
- https://duokey.com
- Company type
- Private
- Founded year
- 2020
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- DuoKey is a Swiss cloud-security company providing enterprise key management and encryption built on Multi-Party Computation and Fully Homomorphic Encryption, serving regulated customers in financial services, automotive, healthcare, and telecommunications.
- Ownership category
- akta.pro rank
DuoKey industry classification
Industry- Product category
- Cloud Encryption & Key Management Software
- NAICS
- Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518), Computer Systems Design and Related Services (54151), Security Systems Services (except Locksmiths) (561621)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Key Management, Encryption & Secrets Management (KMS/HSM/Vault) (HDABAHAG)
- akta.pro secondary industries
- Identity, Access & Key Management (IAM/KMS) as Cloud Core Services (HDABAAAH), Key Management Systems (KMS) & Key Lifecycle (HDADAFAC)
Keywords
Where DuoKey is headquartered
LocationHeadquarters
- HQ city
- Prilly
- HQ country
- Switzerland
- HQ region
- Europe
Offices1 record
Markets served
DuoKey business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Operations, Infrastructure
Revenue model
- SaaS/Cloud Key Management Platform: DuoKey operates as a SaaS-based encryption and key management platform. Customers pay subscription fees for access to the DuoKey KMS platform with modules for Microsoft 365, AWS, Salesforce, ServiceNow, Snowflake, and other cloud environments. Pricing is tailored to enterprise requirements with quote-based tiers.
- Quantum Risk Score Assessment: The Quantum Risk Score assessment is offered free of charge as a lead-generation tool, with the goal of identifying organizations' post-quantum cryptography exposure and converting them into platform customers for PQC migration services.
- Professional Services: DuoKey provides professional services for implementation, integration, and migration projects, particularly around post-quantum cryptography migration and compliance assessments for regulated industries. Services include cryptographic inventory, regulatory gap analysis, and migration roadmap development.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Freemium | One-time | Free Quantum Risk Score assessment with comprehensive report and debrief |
| Subscription | Annual | Enterprise subscription — cloud encryption key management across multiple platforms |
Go-to-market motion4 records
Distribution channels5 records
Marketing channels9 records
DuoKey product offering
Product offeringCore offering
DuoKey provides a cloud-native encryption and key management platform built on Software-Defined HSM and Multi-Party Computation (MPC) that enables enterprises to manage cryptographic keys across cloud environments. It offers Key Management as a Service (KMaaS), Fully Homomorphic Encryption (FHE) for confidential AI, and pre-built encryption modules for Microsoft 365, AWS, Salesforce, and ServiceNow, with a focus on post-quantum cryptography readiness.
Product overview
DuoKey is a Swiss cloud security company offering a cloud-native encryption and key management platform leveraging Multi-Party Computation (MPC) and Fully Homomorphic Encryption (FHE). The platform provides a comprehensive suite of products organized around Quantum Risk Score (QRS) as a flagship assessment tool for post-quantum migration readiness, Double Key Encryption (DKE) for Microsoft 365 as a core product, and numerous cloud-specific encryption modules including Salesforce, ServiceNow, Genesys, AWS XKS/S3, Snowflake Tri-Secret Secure, SQL EKM, and OpenBao SD-HSM integrations. The technology architecture is built on a Software-Defined HSM distributing key shards across independent nodes using MPC, with FHE enabling confidential AI processing on encrypted data. The platform addresses use cases across IoT security, automotive cybersecurity, regulatory compliance, and quantum-ready encryption through a cloud-agnostic, multi-cloud deployment model.
Differentiator
Problem solved
Functional benefit
Products and services
- Key Management as a Service (KMaaS) Cloud-native KMaaS platform that enables enterprises to generate, store, and manage cryptographic keys across cloud environments using MPC and software-defined HSM, designed for regulated industries.
- Software-Defined HSM (SD-HSM) Virtual hardware security module that delivers HSM-grade key protection through Multi-Party Computation, eliminating the need for dedicated physical HSM appliances.
- Microsoft 365 Encryption Module Encryption module that extends DuoKey's KMaaS to Microsoft 365 data, letting enterprises control Microsoft 365 encryption keys from outside Microsoft.
- AWS Encryption Module Encryption module that integrates DuoKey's key management with AWS workloads, enabling BYOK/HYOK patterns across AWS services.
- Salesforce Encryption Module Encryption module that lets Salesforce customers control Salesforce encryption keys through DuoKey, available on the Salesforce AppExchange.
- ServiceNow Encryption Module Encryption module that brings DuoKey-managed keys to ServiceNow instances for protecting workflow and platform data.
- Quantum Risk Score (QRS) Standalone free assessment tool that scans an organization's cryptographic footprint and produces a Quantum Risk Score, helping prioritize PQC migration.
- Confidential AI (FHE) Service Fully Homomorphic Encryption-based service that enables enterprises to train and run AI/ML models on encrypted data without exposing plaintext, targeted at regulated industries.
- PQC Migration Professional Services Advisory and implementation services helping enterprises inventory cryptography, build a Cryptographic Bill of Materials, and migrate to post-quantum cryptography.
Quantifiable outcome
- 60-80% lower TCO vs traditional HSM deployments
- +4 more outcomes
Companies that use DuoKey
Customer profileNamed customers13 records
Segments5 records
Ideal customer profiles4 records
DuoKey technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration11 records
AI capability4 records
Feature9 records
DuoKey partnerships and signals
Strategic signalPartnerships
16 partnerships are on record, tiered minor and core.
- VISCHERminorVISCHER is a sponsor of the Swiss National Startup Team 2026 programme organized by Venturelab, which DuoKey was selected to join. VISCHER provides legal and advisory support to the selected startups.
- HuaweiminorHuawei is a sponsor of the Swiss National Startup Team 2026 programme organized by Venturelab, which DuoKey was selected to join. Huawei provides sponsorship and potentially market access support for the Swiss startup cohort at MWC Barcelona.
- VenturelabminorVenturelab organizes the Swiss National Startup Team programme, selecting top Swiss startups to represent Switzerland at major international events. DuoKey was selected for the 2026 cohort for MWC Barcelona/4YFN.
- TERA Batteries, Quantum Brand Protection, Partisia BlockchainminorLaunched an EU-Compliant Digital Battery Passport together, providing full traceability with secure and tamper-proof stamps and blockchain-based passport. The integrated solution ensures compliance with upcoming EU battery regulation.
- Axiomtek and Blue Edge NetworkminorPartnership announced at GISEC Global Dubai in 2025 to deliver privacy-preserving technology for facial recognition and fleet telematics systems for smart cities and public safety applications. The three companies combine their respective expertise in hardware, networking, and encryption.
- ARES AlgérieminorReseller and integrator partnership announced to strengthen data protection and cybersecurity in Algeria. ARES Algérie serves as DuoKey's channel partner and system integrator for the North African market.
- Atos Scaler AcceleratorminorDuoKey was selected for Atos Scaler, the Atos open innovation accelerator program for startups and SMEs. The program provides mentorship, resources, and market access through Atos' enterprise customer network.
- Google Cloud Platform (GCP)coreDuoKey integrates with Google Cloud Platform, enabling customers to use DuoKey's MPC-based key management for Google Cloud workloads. DuoKey supports BYOK (Bring Your Own Key) patterns for GCP environments, ensuring customer-controlled encryption keys and data sovereignty.
- SalesforcecoreDuoKey is listed on Salesforce Appexchange as a partner providing External Key Management (EKM), Bring Your Own Key (BYOK), and CacheOnly Key Wrapper solutions for Salesforce. The partnership enables full control over encryption keys stored outside Salesforce while ensuring data sovereignty and compliance with GDPR, HIPAA, FINMA regulations.
- ServiceNowcoreDuoKey is a Registered Segment Partner in the ServiceNow Build Partner Programme, delivering advanced and independent encryption solutions for ServiceNow's Column Level Encryption and Edge Encryption through DuoKey's MPC-based KMS. This enables organizations to maintain data sovereignty while using ServiceNow's platform.
- GenesyscoreDuoKey integrates with Genesys through Local Key Management (LKM) to protect sensitive customer data in contact center operations while maintaining compliance with FINMA, DORA, HIPAA, and GDPR requirements. This enables Swiss financial institutions to migrate to Genesys Cloud while satisfying data sovereignty requirements.
- SnowflakecoreDuoKey Tri-Secret Secure provides triple-layer encryption for Snowflake Business Critical and VPS editions, integrating with AWS KMS External Key Store and ensuring complete key sovereignty. The solution prevents either the cloud provider or Snowflake from independently accessing customer data.
- HashiCorp OpenBaocoreDuoKey SD-HSM integrates with OpenBao (the Linux Foundation's open-source fork of HashiCorp Vault) for auto-unseal and seal wrap features. Organizations benefit from 100% Vault API compatibility with 60-80% lower TCO vs HashiCorp Vault licensing.
- MicrosoftcoreDuoKey provides Double Key Encryption (DKE) and Customer Key solutions for Microsoft 365 and Azure Cloud. Available on Microsoft AppSource, the integration ensures Microsoft has no access to customers' encryption master keys while maintaining full data sovereignty.
- AWS (Amazon Web Services)coreDuoKey for AWS XKS (External Key Store) allows organizations to store and use encryption keys outside of AWS Cloud or on-premises, ensuring AWS cannot unwrap customer data keys at will. Also supports AWS S3 client-side encryption with MPC-based key management.
- HES-SO Valais-Wallis and Partisia BlockchainminorPartnership to shape the future of digital identity in Switzerland. Leveraging DuoKey's expertise in privacy-preserving solutions and security, the partnership aims to develop a decentralized electronic identity system complying with the new Swiss e-ID Act.
Scale indicators8 records
Recent moves6 records
Expansion highlights8 records
DuoKey competitors and assessment
Company assessmentDirect peers
- HashiCorp (Vault): HashiCorp Vault is the dominant cloud secrets management and KMS platform, the closest direct competitor to DuoKey. DuoKey explicitly integrates with OpenBao (the Linux Foundation fork of Vault) and positions against Vault with a 60-80% TCO advantage.
- Fortanix: Fortanix offers a confidential computing platform with KMS, HSM-as-a-service, and tokenization that directly competes with DuoKey's MPC-based key management and confidential AI positioning. Both target regulated enterprises with sovereign cloud requirements.
- Akeyless: Akeyless provides a SaaS-based secrets management and KMS platform built on confidential computing, directly competing with DuoKey for cloud-native enterprise key management deals. Both target displacement of HashiCorp Vault.
- Securosys: Securosys is a Swiss HSM vendor offering Primus HSMs and transaction security solutions. As a DuoKey HSM integration partner, it operates in the same Swiss-rooted, regulated-enterprise security market.
Broad incumbents
- Thales (CipherTrust Data Security Platform): Thales offers the CipherTrust Data Security Platform and Luna HSMs covering key management, encryption, and HSM functionality. It is the established incumbent in traditional enterprise encryption that DuoKey's software-defined HSM directly targets for displacement on TCO.
- Entrust: Entrust provides nShield HSMs and a broader data security portfolio including PKI, key management, and encryption. It competes with DuoKey in regulated enterprise KMS and is listed as a supported HSM integration partner, indicating market overlap.
- Utimaco: Utimaco is a leading HSM vendor offering hardware security modules and key management solutions for regulated industries. It is also listed as a DuoKey HSM integration partner, reflecting direct competition for the same enterprise security buyers.
- AWS Key Management Service (KMS): AWS KMS is the cloud-native key management service bundled with the AWS ecosystem. DuoKey's AWS XKS product explicitly positions against AWS's default key custody, competing for sovereignty-focused AWS customers.
- Microsoft Azure Key Vault: Microsoft Azure Key Vault and Double Key Encryption are the cloud-native alternatives to DuoKey's Microsoft 365 DKE and Customer Key products. Both target the same enterprise sovereignty and compliance buyers in regulated industries.
Emerging players
- Zama: Zama builds open-source Fully Homomorphic Encryption tooling (Concrete ML, TFHE-rs) targeting AI-on-encrypted-data use cases. It directly competes with DuoKey's FHE confidential AI narrative and represents an emerging open-source alternative.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
DuoKey social profiles
Digital presenceDuoKey compliance and trust
Trust signalCompliance6 records
DuoKey financial estimates
Financial estimateRevenue estimate
Valuation estimate
DuoKey leadership team
Management profileNumber of profiles
Profiles6 records
DuoKey funding detail
Funding detailFunding overview
Funding rounds1 record
Investors2 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
DuoKey M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about DuoKey
What does DuoKey do?
DuoKey provides a cloud-native encryption and key management platform built on Software-Defined HSM and Multi-Party Computation (MPC) that enables enterprises to manage cryptographic keys across cloud environments. It offers Key Management as a Service (KMaaS), Fully Homomorphic Encryption (FHE) for confidential AI, and pre-built encryption modules for Microsoft 365, AWS, Salesforce, and ServiceNow, with a focus on post-quantum cryptography readiness.
Is DuoKey a public or private company?
DuoKey is a private company. It is classified as venture growth investor backed and is currently operating.
When was DuoKey founded?
DuoKey was founded in 2020. It employs 11 to 50 people.
Where is DuoKey based?
DuoKey is headquartered in Prilly, Switzerland, in the Europe region.
How does DuoKey make money?
Three revenue lines are on record. SaaS/Cloud Key Management Platform is the primary driver. The others are quantum Risk Score Assessment and professional Services.
Who are DuoKey's main competitors?
Direct peers on record are HashiCorp (Vault), Fortanix, Akeyless and Securosys. Broad incumbents are Thales (CipherTrust Data Security Platform), Entrust, Utimaco, AWS Key Management Service (KMS) and Microsoft Azure Key Vault. Zama is listed as an emerging player.
Does DuoKey have an API?
No public API is recorded for DuoKey.
What industry is DuoKey in?
DuoKey's product category is Cloud Encryption & Key Management Software. Its primary akta.pro industry code is HDABAHAG, Key Management, Encryption & Secrets Management (KMS/HSM/Vault), with a secondary code of HDABAAAH, Identity, Access & Key Management (IAM/KMS) as Cloud Core Services. Its NAICS code is 518 and its SIC code is 7370.