Of course they also require full unencrypted access to the data. If the company doesn't surrender the keys to the server data, they can just switch the server off.