SIG Lite
Control CEK-11
Extractive Review Standard
How to answer 'Do you support customer-managed encryption keys (BYOK)?' on a SIG Lite
Reviewer Guidance & Pitfalls
Answer honestly: if supported on enterprise plans, state so; if AWS KMS managed, state that.
Example Answer Passing Enterprise Audit
Compliant Response Template
Standard tiers use multi-tenant KMS keys; enterprise customers can configure dedicated Customer-Managed Keys (BYOK) upon request.
Filling out a CAIQ or SIG Lite right now?
QuietQuestionnaire automatically drafts answers with citations from your own SOC 2 report, catches contradictions reviewers reject, and locks exports behind cryptographic human sign-off.
Zero spam. 100% confidential. No credit card required.