Abstract: A method of managing access to a key. The method comprises associating the key with an encrypted data object, the key being required to decrypt the data object; generating a number of fragments of the key, the number of fragments corresponding to a number of parties subject to a fragmentation agreement; and encrypting each fragment with a public key corresponding to each of the parties. The method further comprises encrypting each encrypted fragment with a public key of a trusted party; and storing the encrypted fragments with the encrypted data object on a server of the trusted party.