Source
Security, AI controls & deployment — found from sitemap — Mural
Checked for Mural on 1 Nov 2026
- Page
- https://support.mural.co/s/article/Secure-BYOK-encryption
- Checked
- 1 Nov 2026, 09:22 UTC
- How we may use it
- Public page, crawling permitted
Technical details
- type
- page
- http status
- 200
- content hash
- sha256:91db2df4d778fdaee5e8c4152ecb3acc3f2a4d76879f8b4677a1bc6bdc56fd15
- permission
- robots_ok
- screenshot
- Screenshot on file (internal exhibit, not published)
Cited by
Facts read from this source
-
Byok plan availability Report an error
“This offering is only available for customers on the enterprise plan and is included in the platform fee for customers on the new member pricing model. For customers on a legacy enterprise pricing solution (e.g., QEM), this feature comes as a paid add-on.”
-
Byok definition Report an error
“BYOK (Bring Your Own Key) encryption is a method of encrypting data at rest using a customer’s dedicated encryption key. Mural’s BYOK offering allows customers to use their encryption key stored in their own managed AWS (Amazon Web Services) KMS (Key Management System).”
-
Encryption at rest in transit Report an error
“Mural encrypts all customer data - both at rest, using database encryption, and in transit, employing TLS (Transport Layer Security) certificates and public/private keys.”
-
Byok supported data types Report an error
“Sticky notes. Text (headings, paragraphs, comments). Shapes. Connectors. Icons. Images. Mind maps. Templates*. Tables. Files. Drawings. Activity logs. Chas. Voting sessions. Tags. Outlines. Mural AI (content created by generate, cluster, or summarize features).”
-
Byok unsupported data types Report an error
“User names. User email addresses. Company name. Workspace names. Room names. Names of murals. Reporting and usage metadata. Thumbnails.”
-
Byok limitation content movement Report an error
“Customers are unable to move a mural to a workspace outside of the BYOK-enabled workspace's company or into a BYOK-enabled workspace from outside the workspace's company.”
-
Byok limitation content library Report an error
“The content library feature is not available for users that work in a BYOK-encrypted workspace.”
-
Byok configuration limit Report an error
“You are allowed one BYOK encryption configuration per enterprise company.”
-
Byok activation Report an error
“Mural Support must activate BYOK encryption. Please contact our team for assistance.”
-
Byok external collaboration Report an error
“External collaboration via guests and visitors is available with BYOK, contingent on your defined external sharing permissions.”
-
Byok kms providers Report an error
“Currently, Mural supports only AWS KMS. Please communicate with us if you'd like support for other KMS systems (e.g., Azure).”
-
Byok key revocation Report an error
“Upon revoking a key, Mural will stop having access to the affected data within 15 minutes. End-users will consequently lose the ability to create new content or access previously encrypted data.”
-
Byok data residency Report an error
“The KEK remains securely in your key store. Your KEK's residence, within your AWS KMS instance, can be located in any region you prefer. Meanwhile, your user-generated Mural content CEK and DEKs reside in your chosen data residency region (default in North America), regardless of your AWS KMS operating region.”
-
Byok performance impact Report an error
“No, enabling BYOK does not impact Mural's performance levels.”
Scores citing this record
- The Microsoft 365 Admin Canvas, templates & content
- The Microsoft 365 Admin Security, AI controls & deployment
- The Microsoft 365 Admin European sovereignty
- The Product Team Lead Canvas, templates & content
- The Product Team Lead Security, AI controls & deployment
- The Product Team Lead European sovereignty
- The Public-Sector Project Lead Canvas, templates & content
- The Public-Sector Project Lead Security, AI controls & deployment
- The Public-Sector Project Lead European sovereignty
- The Skeptic Canvas, templates & content
- The Skeptic Security, AI controls & deployment
- The Skeptic European sovereignty
- The Works Council Member Canvas, templates & content
- The Works Council Member Security, AI controls & deployment
- The Works Council Member European sovereignty
- The Workshop Facilitator Canvas, templates & content
- The Workshop Facilitator Security, AI controls & deployment