customer-held encryption keys

Also written: keys you hold, customer-managed keys

Encrypting data with keys that you control, kept away from the provider. If the provider is forced to hand over the data, it can only hand over unreadable text.