1. A method of maintaining the confidentiality of data provided by an organization for storage on a third party database system, the method comprising: receiving data encrypted using a first key, wherein the first key is stored on an internal network of the organization; storing the encrypted data on the third party database system; associating, on the third party database system, metadata with the encrypted data, wherein the metadata includes information usable to locate the first key; receiving a request for the encrypted data from a computing device communicating on the internal network of the organization; and sending the encrypted data with the associated metadata to the computing device.