1. A computer program product comprising a non-transitory computer readable medium storing a plurality of instructions for controlling one or more processors of a database system to perform an operation for maintaining the confidentiality of data provided by an organization for storage on a database, the instructions being executable by the one or more processors to: receive, from the organization, data encrypted using a first key, wherein the first key is stored on an internal server on an internal network of the organization, the internal network being separate from a network having a server of the database system; store the encrypted data on the database system; associate, on the database system, metadata with the encrypted data, wherein the metadata includes an address of where the first key is stored on the internal network of the organization; provide, by the server, a webpage allowing a user of a computing device communicating with the internal network of the organization to log in as a client of the database; receive, at the server, a request for a page including the encrypted data from the computing device; and send the encrypted data with the associated metadata to the computing device as part of the requested page.