为团队提供快速安全的文件加密，配备先进的密钥管理

We know how important security and encryption are to our customers—especially with enterprise standards rapidly evolving. That’s why we engage with our customers to understand what their security teams need and how we can help. Through those conversations, we developed our new advanced key management solution, designed to make team-based file encryption faster and more secure. This work also laid the foundation for the encryption approach we’re now bringing to Dropbox Dash, our universal search and knowledge management tool.

我们知道安全性和加密对我们的客户有多重要——尤其是在企业标准迅速发展的情况下。这就是为什么我们与客户沟通，以了解他们的安全团队需要什么以及我们如何提供帮助。通过这些对话，我们开发了新的高级密钥管理解决方案，旨在使基于团队的文件加密更快、更安全。这项工作也为我们现在正在引入的加密方法奠定了基础，适用于Dropbox Dash，我们的通用搜索和知识管理工具。

Two main priorities shaped how we built this solution. First, customers with especially sensitive or confidential data (e.g. those in finance or healthcare fields) told us they wanted their file data encrypted at rest—for example, when it’s not being moved or accessed—using keys unique to their team. This way, they could temporarily, or even permanently, disable all access to their team’s data if needed. Second, they wanted that encryption to be anchored in a hardware security module (HSM)—a physical device designed to securely generate, store, and manage encryption keys—providing stronger protections against unauthorized access. Together, these features help teams limit their security risks and respond more effectively to potential threats or breaches.

两个主要优先事项塑造了我们构建此解决方案的方式。首先，拥有特别敏感或机密数据的客户（例如金融或医疗领域的客户）告诉我们，他们希望在静态状态下对其文件数据进行加密——例如，当数据未被移动或访问时——使用独特于其团队的密钥。这样，他们可以在需要时暂时或永久禁用对其团队数据的所有访问。其次，他们希望这种加密能够基于硬件安全模块 (HSM)——一种旨在安全生成、存储和管理加密密钥的物理设备——提供更强的保护，以防止未经授权的访问。这些功能共同帮助团队限制其安全风险，并更有效地应对潜在威胁或漏洞。

In this piece, we’ll walk through how we solved for scalable, secure team-level encryption without slowing down the Dropbox experience. We’ll share our decision-making process, the technical challenges we faced, and how the solution we built is influencing the way we think about security for AI tools like Dash.

在这篇文章中，我们将介绍如何...