How exactly does Key-as-a-Service KaaS work?
zerothird generates quantum keys using entangled photons via hardware fully owned and operated by zerothird. These keys are temporarily and securely stored in a local key vault—never forwarded to any zerothird facility or software–until retrieved by the client. Clients retrieve keys directly via standardized interfaces for real-time encryption within their own systems.

In long-distance links requiring trusted nodes, quantum keys are generated and temporarily stored at intermediate points fully owned and operated by zerothird. These trusted nodes are maintained under strict physical, IT, and operational security. Once relayed, the keys are made accessible to the client’s endpoints, where they’re pulled and used locally, without zerothird ever accessing their content. Across both models, zerothird maintains operational responsibility while ensuring clients retain control over when and how keys are applied. The KaaS model also shifts cost from CapEx to OpEx, ultimately reducing procurement delays and accelerating implementation timelines through simplified budgeting.