Bring your own keys, keep your negotiated pricing

For our largest customers, provider discounts and volume commitments matter more than convenience. GROUNDROCK now supports BYOK (bring your own keys) at the workspace level.

The gateway will prefer your credentials first, and can fall back to the GROUNDROCK shared pool if a provider is down or rate-limited — configurable per routing rule.

Keys are encrypted at rest with AES-GCM envelope encryption and are never returned to the client after creation.