Introducing Customer-Managed Keys in Cube Store

The semantic layer in Cube serves as a trusted source of truth for businesses, standardizing metrics definitions and governing data access while ensuring optimal query performance through its caching layer, Cube Store. Cube protects data both in motion and at rest by using encrypted connections and proper authentication during data loading and serving processes. Today, an additional layer of data-at-rest protection is being introduced for Cube Cloud users: Parquet encryption with customer-managed keys in Cube Store. Unlike some BI tools that store raw data, Cube does not store any raw data but builds and stores data rollups managed by Cube Store. These rollups are encrypted at rest using industry-standard AES cipher with 256-bit keys, and key management is performed via the UI in the settings of your Cube Cloud deployment. Parquet encryption with customer-managed keys (CMK) in Cube Store is available to Cube Cloud customers on Enterprise and above plans.