All Posts

When companies move sensitive data to the cloud, they often rely on a Cloud Key Management Service (KMS) and Customer-Managed Keys (CMK) to maintain control. If the goal is to protect data from a cloud provider's rogue employee, a customer-owned key in a KMS helps. But if the goal is data sovereignty, it is an entirely different story. Under regulations like the US CLOUD Act, global cloud providers can be compelled to hand over data and API access across borders. With standar

Read our post on the Red Hat blog — written together with the Red Hat team. The post covers a critical gap in confidential computing: hardware-level memory protection (data in use) is only part of the picture. AI workloads also need secure storage for training datasets, AI models, and RAG documents — and traditional cloud encryption doesn't provide end-to-end protection. We explore three approaches to storage security in confidential container environments, show why client-s

Enterprise tools like Snowflake and managed cloud services only integrate with standard storage APIs like S3 — they don't support proprietary interfaces. This limitation makes it difficult to seamlessly integrate such tools into the AltaStata Fortified Data Lake across AWS, Azure, Google Cloud, IBM, and on-premise storage. The Solution The AltaStata S3 Gateway is an S3-compatible REST API that translates standard S3 operations into AltaStata's encryption framework. It functio

When it comes to securing your organization's data, you have more options than ever. MinIO has become a popular choice for on-premises...