1. A computer-implemented method for managing encryption keys in a multi-tenant environment wherein a multi-tenant platform operator maintains a server platform that interfaces with a multi-tenant database and dynamically executes virtual applications for a plurality of tenants each having a unique organization level encryption key, the server platform including a source code memory sector not located at said multi-tenant database and not accessible by said tenants, the method comprising: storing a first portion of a master key in a first sector of a file system associated with said multi-tenant database such that said first portion of said master key is accessible by only a first one of said tenants and is not accessible by said platform operator; and storing a second portion of said master key in said source code memory sector.