Abstract: A computing system may receive, at a server, a first request from a user, the first request for encryption of a set of data. The server may transmit, to a key management system, a second request for a data encryption key associated with the set of data indicated via the first request. The server may receive, from the key management system and in response to the second request, the data encryption key being associated with encrypting the set of data and a reference of a namespace key, the namespace key being associated with a different level in the key hierarchy of the key management system than the data encryption key. The server may store an encrypted version of the set of data, the data encryption key, and the reference of the namespace key based on receiving the data encryption key from the key management system.