Separate customer-controlled recovery from everyday access control, and understand who owns the keys and responsibilities in your deployment.
Independent Recovery is Business-only. Dedicated-deployment key arrangements are separately scoped.
Independent Recovery uses the customer-controlled recovery-key arrangement for the supported encrypted backup and offline restore workflow. It is distinct from the signing keys used to verify provenance and the encryption keys used by the running service.
The Business recovery workflow includes an encrypted package and Recovery Desktop for Windows or Mac. Recovery requires the matching private recovery key and a usable exported package. Protect and test the key: losing it can make recovery impossible.
For a dedicated environment, agree cloud ownership, key administration, backups and ongoing operation before purchase. This is not a blanket promise that every SaaS subscriber can replace all service encryption keys.
Paper Keys have their own documented, permission-controlled workflow. They are an advanced file-key feature, not a replacement for service recovery, recipient access checks or safe key custody.
Confirm the recovery capability and plan.
Set up the supported recovery-key arrangement.
Keep an approved encrypted backup package and matching recovery key.
Test recovery in a controlled environment before relying on it.
Recovery keys, provenance verification keys and everyday encryption keys serve different purposes.
Retain a usable encrypted recovery package outside the running service.
Keep the matching private recovery key under your organisation’s control.
Use Recovery Desktop on Windows or Mac to restore supported content offline. Test recovery before you need it.
No. Different keys serve different purposes. This page does not claim that the running hosted application can never access content.
The supported offline recovery process needs the matching key. Key custody and tested backups are essential.
Use the Independent Recovery and dedicated-deployment pages, and the signed-in administration workflow for your organisation.
Manage users, roles, shared workspaces and communication settings around the way your organisation works.
Explore the capability →Resolve questions about sensitive exchanges with time-stamped activity, rather than relying on inbox recollection.
Explore the capability →Keep project files together, organise folders and decide what each authorised person can do.
Explore the capability →Explore the real product workflows or register your interest in the hosted platform.
