Ionic Security has built the world's first high-assurance, globally federated data management and security platform. The Ionic platform provides granular control over and protection of data throughout its life, from creation through sharing, consumption, archival, and retirement. Ionic Enrollment and Key Management Services allow users and devices to authenticate and enroll with the Ionic platform. The services store and manage data encryption keys, and serve as a customer-controlled high-assurance logic gate for policy and key release decisions. Keys may be stored and handled in AWS data stores backed by AWS CloudHSMs, customer controlled data stores and HSMs, or a hybrid design incorporating both.