Team tier roadmap

Bring Your Own Key

Today Meridian uses pooled encryption keys managed by us. BYOK lets your team supply and rotate its own keys, giving you full cryptographic sovereignty over your data at rest.

On roadmap

BYOK is planned for the Team tier. We are designing the key ingestion flow, envelope encryption scheme, and rotation API. No release date yet — we will update this page when the feature enters private beta.

Planned capabilities

  • ▸Upload AES-256 keys via the dashboard or API — keys never leave your infrastructure unencrypted.
  • ▸Envelope encryption: Meridian wraps data keys with your master key so you can revoke access instantly.
  • ▸Scheduled rotation with overlap windows — zero-downtime key rollover.
  • ▸Audit log of every encrypt/decrypt operation tied to your key ID.

Interested in early access? Email the team and mention BYOK.