Abstract: A system for key-rotation in a data platform. A computing system receives key-rotator application configuration instructions and generates a key-rotator application based on the key key-rotator application configuration instructions. A key-rotation process using the key-rotation application is initiated based on a predetermined schedule where the key-rotation process includes accessing a data platform based on an account identification of the key-rotator application configuration instructions, determining a private key and public key, storing the private key and the public key in a datastore, assigning the public key to a user profile of the data platform where the user profile included in the key-rotator application configuration instructions, updating one or more data platform services with the private key, and deleting a prior public key from the user profile.