Replication of customer keys stored in a virtual vault

A computing system, comprising:

• one or more processors;
• and
• one or more computer-readable media having stored thereon a sequence of instructions that, when executed, cause the one or more processors to:
• receive a request from a user device to transmit encryption keys stored in a first virtual vault of a plurality of virtual vaults of a first hardware security module (HSM) of a first data center to a second virtual vault of a second hardware security module (HSM) of a second data center, the request comprising an account identifier;
• identify a first account-specific write-ahead log (WAL) of a plurality of account-specific write-ahead logs (WALs) based at least in part on the account identifier, each account-specific write-ahead log (WAL) of the plurality of account-specific write-ahead logs (WALs) corresponding to the first hardware security module (HSM), and each account-specific write-ahead log (WAL) of the plurality of account-specific write-ahead logs (WALs) configured to record changes to a respective virtual vault of the plurality of virtual vaults;
• access the encryption keys from the first account-specific write-ahead log (WAL) of the first hardware security module (HSM);
• and
• transmit the encryption keys to the second data center based at least in part on accessing the encryption keys from the account-specific write-ahead log (WAL).

One or more non-transitory computer-readable media having stored thereon a sequence of instructions that, when executed by one or more processors of a computing system, cause the computing system to:

• receive a request from a user device to transmit encryption keys stored in a first virtual vault of a plurality of virtual vaults of a first hardware security module (HSM) of a first data center to a second virtual vault of a second hardware security module (HSM) of a second data center, the request comprising an account identifier;
• identify a first account-specific write-ahead log (WAL) of a plurality of account-specific write-ahead logs (WALs) based at least in part on the account identifier, each account-specific write-ahead log (WAL) of the plurality of account-specific write-ahead logs (WALs) corresponding to the first hardware security module (HSM), and each account-specific write-ahead log (WAL) of the plurality of account-specific write-ahead logs (WALs) configured to record changes to a respective virtual vault of the plurality of virtual vaults;
• access the encryption keys from the first account-specific write-ahead log (WAL) of the first hardware security module (HSM);
• and
• transmit the encryption keys to the second data center based at least in part on accessing the encryption keys from the account-specific write-ahead log (WAL).