Cloudflare announced a closed beta of a post-quantum GeoKey Manager for its Data Localization Suite. The system is designed to let customers restrict which geographic regions can unwrap protected decryption keys.
Design goals described by Cloudflare
- The service is intended to support regional controls for sensitive data while Cloudflare continues operating a distributed network.
- Cloudflare describes hybrid ML-KEM-768 and X25519 protection for the key-management design.
- The company says general availability is planned for the first quarter of 2027.
The announcement addresses a harvest-now, decrypt-later risk: encrypted data collected today could be retained for later decryption if its protection becomes breakable.
This is a closed-beta product announcement, not a general availability statement. Organizations with residency requirements should review the final product documentation and applicable compliance obligations.