Press Release

Thales Announces Support for External Key Management in Oracle Cloud Infrastructure

Thales launches CipherTrust Cloud Key Management integration with Oracle Cloud Infrastructure (OCI) to meet growing customer demand

Collaboration adds Hold Your Own Key (HYOK) to help support data sovereignty requirements for OCI customers across all 45 Oracle Cloud regions around the world

Oracle CloudWorld, Las VegasSeptember 18, 2023

Thales, a leading global technology and security provider, today announced the launch of CipherTrust Cloud Key Management’s Hold Your Own Key (HYOK) in Oracle Cloud Infrastructure (OCI) across all 45 Oracle Cloud Regions—including the recently launched Oracle EU Sovereign Cloud—and OCI’s other distributed cloud offerings. To help meet continued customer demand and the accelerated growth of the OCI platform, HYOK will help OCI customers achieve their data sovereignty and other compliance objectives more easily by encrypting data in OCI with keys that are controlled and managed outside of the cloud platform. The new HYOK capabilities expand on existing support for Bring Your Own Key (BYOK) in OCI.

According to the 2023 Thales Cloud Security Study, while the world has become cloud-first, operational complexity in cloud environments remains a significant obstacle for organizations. Overall, cloud security awareness has improved, but concerns around securing data are also rising, with over half (55 percent) of security professionals indicating it’s more complex to manage data in the cloud than it is in on-premises environments. As a result, as cloud usage grows, organizations need a new way to effectively secure cloud environments.

The CipherTrust Cloud Key Management integration enables OCI customers to store and manage their encryption keys outside OCI in a virtual or physical appliance that is entirely under their control and outside of the cloud. Customers can also localize their encryption keys wherever they choose and maintain control of their encrypted data in cloud environments. This approach helps address some of the key privacy and data sovereignty requirements organizations face while making it easier to demonstrate compliance to regulators.

The availability of the Thales external key management solution can help accelerate the move of sensitive data into Oracle Cloud Regions by storing the key in a location that is different than the encrypted data. This enables customers to maintain the same process for managing and controlling encryption keys, whether those keys are used on-premises or in the cloud

Thales CipherTrust Cloud Key Management, the industry-leading multi-cloud encryption key lifecycle management solution, alleviates operational barriers across clouds and hybrid environments. The HYOK functionality gives OCI customers the external key management capabilities necessary to navigate today’s cloud-driven landscape and remain in charge of their data, not just in OCI, but across other cloud providers.

Todd Moore, Vice President of Data Security Products at Thales: “Businesses are increasingly shifting away from legacy on-premises deployments and need assistance in moving their data to the cloud while maintaining security and compliance. As the industry leader in external key management, we’re proud to be the first to support HYOK features in OCI, equipping OCI customers with the necessary solutions to be successful in this journey. To further this best-in-class experience for our combined customer base, Thales is also the first supporting vendor for Oracle EU Sovereign Cloud initiatives.”

Jeppe Larsen, Senior Vice President, OCI Security and Identity at Oracle: “We’re dedicated to making OCI the most trusted cloud for security-sensitive workloads, including those in highly regulated regions and industries. Oracle EU Sovereign Cloud helps customers operating in Europe to address their data sovereignty requirements, and the HYOK integration with Thales enhances that offering. In addition, this partnership and integration will benefit U.S. customers in regulated industries such as financial services by enabling them to take full advantage of OCI, with the privacy and security benefits of HYOK from Thales.”

Contact Info

About Thales

Thales (Euronext Paris: HO) is a global leader in advanced technologies within three domains: Defence & Security, Aeronautics & Space, and Digital Identity & Security. It develops products and solutions that help make the world safer, greener and more inclusive.

The Group invests close to €4 billion a year in Research & Development, particularly in key areas such as quantum technologies, Edge computing, 6G and cybersecurity. Thales has 77,000 employees in 68 countries. In 2022, the Group generated sales of €17.6 billion.

About Oracle

Oracle offers integrated suites of applications plus secure, autonomous infrastructure in the Oracle Cloud. For more information about Oracle (NYSE: ORCL), please visit us at

About Oracle CloudWorld

Oracle CloudWorld is Oracle’s largest global celebration of customers and partners. Join us to discover the insights you need to tackle your biggest business challenges, build your skills, knowledge, and connections, and learn more about our cloud infrastructure, database, applications and developer technologies including Java from the people that build and use them. For registration, live keynotes, session details, news and more visit or

Future Product Disclaimer

The preceding is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, timing, and pricing of any features or functionality described for Oracle’s products may change and remains at the sole discretion of Oracle Corporation.

Forward-Looking Statements Disclaimer

Statements in this article relating to Oracle’s future plans, expectations, beliefs, and intentions are “forward-looking statements” and are subject to material risks and uncertainties. Many factors could affect Oracle’s current expectations and actual results, and could cause actual results to differ materially. A discussion of such factors and other risks that affect Oracle’s business is contained in Oracle’s Securities and Exchange Commission (SEC) filings, including Oracle’s most recent reports on Form 10-K and Form 10-Q under the heading “Risk Factors.” These filings are available on the SEC’s website or on Oracle’s website at All information in this article is current as of September 18, 2023 and Oracle undertakes no duty to update any statement in light of new information or future events.


Oracle, Java, MySQL and NetSuite are registered trademarks of Oracle Corporation. NetSuite was the first cloud company—ushering in the new era of cloud computing.