1. A method of maintaining the confidentiality of data provided by an organization for storage on a database system including a server and a database, the method comprising: receiving, by the server, data encrypted on an internal network of the organization using a first key, wherein the first key is stored on the internal network of the organization, the internal network being separate from an external network having the server of the database system by a firewall; storing, by the server, the encrypted data on the database in association with metadata usable to locate the first key on the internal network of the organization; providing, by the server, a login page allowing a user of a computing device on the internal network of the organization to log in as a client of the database system, receiving, by the server, a request for the encrypted data from the computing device; and sending, by the server, the encrypted data with the associated metadata to the computing device, wherein the metadata is usable by the computing device to locate the first key on the internal network of the organization and decrypt the encrypted data using the first key.