Changelog

WorkOS Vault adds Azure support for Bring Your Own Key

October 7, 2025

WorkOS Vault now supports Azure Key Vault for Bring Your Own Key (BYOK) encryption. Enterprise IT admins can connect their Azure Key Vault instance and use their own customer-managed keys to wrap Vault data keys. This enables auditing usage of keys and disabling access via key revocation. Setup is self-serve through the Admin Portal to ensure easy onboarding. Read the BYOK docs to get started.