Data recovery for a computing device

A recovery system comprising:

• a security circuitry configured to receive, over a network, a first request from a computing device, the first request being for a second key portion configured to be combined with a first key portion stored on the computing device to recover a decryption key for decrypting encrypted data;
• and
• a database recorder configured to transmit a second request to a database to record a log entry about the first request in the database,
• the security circuitry configured to transmit the second key portion to the computing device after the log entry is recorded in the database.

A non-transitory computer-readable medium storing executable instructions that when executed by at least one processor cause the at least one processor to execute operations, the operations comprising:

• receiving a first authentication credential for recovery access to a computing device, the first authentication credential being different from a second authentication credential used to access encrypted data on the computing device;
• obtaining, in response to receipt of the first authentication credential, a first key portion stored on the computing device;
• transmitting, over a network, a request to receive a second key portion, the request to receive the second key portion initiating recording of a log entry into a database;
• receiving a response that includes the second key portion after the log entry is recorded into the database;
• recovering a decryption key using the first key portion and the second key portion;
• and
• decrypting the encrypted data using the decryption key.