Skip to content
Robnu
Glossary · Security

KMS

AWS Key Management Service — manages the master key that protects each seller's DEK.

app.robnu.com/ai/conversationsRobnuAI · seller-scopedai_conversations · ai_messages · ai_tool_callsWhy did Ajio short-pay batch 7782?tool_calllookup_payouts(batch=7782)7 of 218 lines were short-paid by ₹47 each — SLA-missdeduction. All 7 are recoverable. I drafted claims foryou with the manifest + AWB pre-attached.→ /claims · 7 drafts readywithSellerScope · seller_id locked

KMS is AWS's hardware-security-module-backed key management service. Robnu uses KMS to hold the master key that seals every per-seller DEK.

The advantage of KMS is two-fold: the master key never leaves the HSM (Robnu can't accidentally leak it), and every unseal operation is logged in CloudTrail (we can audit who decrypted what, when).

For sellers who care about compliance posture (DPDP, SOC 2 in future): KMS is the gold-standard primitive for credential storage. Robnu treats marketplace tokens with the same architecture a payments processor would treat card data.

build e7713058ee9ee67dffe938623a3f859dcb157b2a · 2026-07-24T12:14:00+05:30