1. A method of maintaining the confidentiality of data provided by an organization for storage on a database system, the method comprising: receiving data encrypted using a first key, wherein the first key is stored on a first network of the organization, the first network being separate from a second network having the database system; storing the encrypted data on the database system; associating, on the database system, metadata with the encrypted data; providing a login page allowing a user of a computing device on the first network of the organization to log in as a client of the database system, receiving a request for the encrypted data from the computing device; and sending the encrypted data with the associated metadata to the computing device, wherein the metadata is usable by the computing device to locate the first key and decrypt the encrypted data using the first key.