Your question equals “does cp have back door to read encrypted endpoints” and the answer is clearly no!
Check point does NOT have ability to access the private customer data. i would be concerned as customer if cp had such things
the sole owner of “opening keys” is the customer and the owners of the end user credentials are the user of the system and the company - this has nothing with being a customer - they can recover from backup etc (they can use temporary access to recover it if they have the keys.
We never hold the keys
Dorit