Security & compliance

Protect every key to ISO 27001 standard

Your keys are worth real money, so Alaska treats them that way. Certified to ISO/IEC 27001:2022, with sign-in through your identity provider and MFA, secure in-portal delivery and a record of every action.

Trusted by publishers
SEGA logoBandai Namco logo
ISO/IEC 27001:2022
Independently certified · assessed by CQS
Encrypted deliveryIdP auth + MFAFull audit trail
The problem

Keys are money. Most tools treat them like text.

Spreadsheets and email were never built to protect something this valuable.

Keys in plain email

Unsecured email can be forwarded, intercepted and lost, with no way to know it happened.

Shared logins

Separate passwords for every tool, shared between people, are an open door.

No record of who did what

When an auditor asks who changed a SKU or approved a request, a spreadsheet can't answer.

Inside Security & compliance

Security at every step

From sign-in to delivery to audit, each layer is built in, not bolted on.

ISO/IEC 27001:2022

K3YS Limited is assessed and approved by CQS (Certified Quality Systems) Limited to ISO/IEC 27001:2022.

Your identity provider

Sign in with Google, Azure or AWS, or make Alaska an extension of your internal network via your identity servers or LDAP.

Multi-factor authentication

MFA protects access to your keys without making sign-in a chore.

Secure key delivery

Keys are delivered in-portal, never in plain email, with optional two-factor verification for recipients.

Direct to individual

Full audit trail

See everything from request sign-off steps to changes to games, SKUs, users and companies.

Failed login alerts

Be notified in real time when a sign-in attempt is unsuccessful.

Alerts
A great key management solution.

“Alaska lets us securely manage, distribute and audit keys internally and externally across all platforms. Working with the K3YS team has allowed us to work smarter, streamline internal processes and facilitate demand for our product.”

Natalie Cooke
Operations Director · SEGA Europe Limited
Questions

Security & compliance, answered

Something else on your mind? Ask us in a demo or email alaska@k3ys.co.

What does the ISO 27001 certification cover?

The certification applies to the approved Information Security Management System relating to the provision of scalable digital serial key management software, cloud hosting and consultancy for the games industry.

Which identity providers can we sign in with?

Common providers like Google, Azure and AWS. Alaska can also act as an extension of your internal network using your own identity servers or LDAP.

How are keys delivered to recipients?

Securely, in-portal, rather than in plain email, with optional two-factor verification. Every delivery can be tracked, audited and reported on.

Does the audit trail help with ISO audits of our own?

It gives you full visibility of request sign-off steps and changes to data like games, SKUs, users and companies, which is the kind of record auditors ask for and spreadsheets can't provide.

Get in touch

See security & compliance in action

Book a walkthrough and we'll show you how security & compliance would work with the way your team already manages keys.

Trusted by
SEGA logoBandai Namco logo