Cloud key escrow system

A computer implemented method for securely storing encrypted data and providing access to the stored encrypted data according to a predefined policy, the method comprising:

• receiving a request to access stored, encrypted data, the encrypted data being stored in a data storage system according to a predefined policy, the encryption preventing the storage system from accessing unencrypted data decrypted from the encrypted data, the policy allowing the encrypted data to be provided to an authorized entity only upon receiving permission to access the data from a threshold number of verified third parties;
• in response to receiving the request to access the stored, encrypted data, sending a query to a plurality of the verified third parties, the query requesting permission from the verified third parties to access the stored, encrypted data according to the predefined policy;
• receiving a response to the query from at least a threshold number of the verified third parties, each received response including permission to access the stored, encrypted data;
• and
• in response to receiving permission to access the stored, encrypted data from at least a threshold number of the verified third parties, allowing the requesting party to access the user's stored, encrypted data according to the predefined policy.