Enhanced system security

A system of maintaining confidentiality of data provided by an organization for storage on a database, the system comprising:

• one or more processors;
• a network interface to a network;
• and
• a memory for storing instructions to control the processors, the instructions being executable by the one or more processors to:
• receive data encrypted using a first key, wherein the first key is stored on an internal network of the organization, the internal network being separate from the network;
• store the encrypted data;
• associate metadata with the encrypted data;
• receive a request for the encrypted data from a computing device communicating on the internal network of the organization;
• and
• send the encrypted data with the associated metadata to the computing device, wherein the metadata is usable by the computing device to locate the first key and decrypt the encrypted data using the first key.

A method of maintaining the confidentiality of data provided by an organization for storage on a database system, the method comprising:

• receiving data encrypted using a key, wherein the key is stored on an internal network of the organization;
• storing the encrypted data on the database system;
• associating, on the database system, metadata with the encrypted data, wherein the metadata includes key location information usable to locate the key on the internal network of the organization;
• providing a webpage allowing a user of a computing device communicating on the internal network of the organization to log in as a client of the database system;
• receiving a request for a page including the encrypted data from the computing device;
• and
• sending the encrypted data and the associated metadata to the computing device as part of the requested page.