Post-quantum keys, managed online
Choose your configuration and billing option, then activate and operate your HSM remotely.
Want to test Post-Quantum Cryptography?
Generate ML-KEM and ML-DSA keys on the Sandbox and check that your applications work with them, or ask our team to help plan your move to quantum-safe keys. See supported algorithms
CloudHSM features
Sandbox
BYOK
Economy
Economy Certified
Platinum
* Available as an add-on only
‡ Available in Latest (non-certified) firmware only
Sandbox
BYOK
Economy
Economy Certified
Platinum
Uptime guaranteeRely on guaranteed service availability with defined uptime commitments.
Uptime guaranteeRely on guaranteed service availability with defined uptime commitments.Best effort
Uptime guaranteeRely on guaranteed service availability with defined uptime commitments.99.9%
Uptime guaranteeRely on guaranteed service availability with defined uptime commitments.99.9%
Uptime guaranteeRely on guaranteed service availability with defined uptime commitments.99.9%
Uptime guaranteeRely on guaranteed service availability with defined uptime commitments.99.9%
Production useRun your critical workloads in production with confidence.
Production useRun your critical workloads in production with confidence.
Production useRun your critical workloads in production with confidence.
Production useRun your critical workloads in production with confidence.
Production useRun your critical workloads in production with confidence.
Production useRun your critical workloads in production with confidence.
Qualified useProve to third parties that your cryptographic keys are securely stored in the HSM.
Qualified useProve to third parties that your cryptographic keys are securely stored in the HSM.
Qualified useProve to third parties that your cryptographic keys are securely stored in the HSM.
Qualified useProve to third parties that your cryptographic keys are securely stored in the HSM.
Qualified useProve to third parties that your cryptographic keys are securely stored in the HSM.
Qualified useProve to third parties that your cryptographic keys are securely stored in the HSM.
Dedicated HSMIsolate your cryptographic operations on a dedicated HSM for greater control and security.
Dedicated HSMIsolate your cryptographic operations on a dedicated HSM for greater control and security.
Dedicated HSMIsolate your cryptographic operations on a dedicated HSM for greater control and security.
Dedicated HSMIsolate your cryptographic operations on a dedicated HSM for greater control and security.
Dedicated HSMIsolate your cryptographic operations on a dedicated HSM for greater control and security.
Dedicated HSMIsolate your cryptographic operations on a dedicated HSM for greater control and security.
FIPS 140-3 Level 3 hardwareProtect your cryptographic keys with tamper-resistant hardware and controlled key access.
FIPS 140-3 Level 3 hardwareProtect your cryptographic keys with tamper-resistant hardware and controlled key access.
FIPS 140-3 Level 3 hardwareProtect your cryptographic keys with tamper-resistant hardware and controlled key access.
FIPS 140-3 Level 3 hardwareProtect your cryptographic keys with tamper-resistant hardware and controlled key access.
FIPS 140-3 Level 3 hardwareProtect your cryptographic keys with tamper-resistant hardware and controlled key access.
FIPS 140-3 Level 3 hardwareProtect your cryptographic keys with tamper-resistant hardware and controlled key access.
Firmware version policyReceive the latest available firmware or a Common Criteria-certified version, depending on your certification requirements.
Firmware version policyReceive the latest available firmware or a Common Criteria-certified version, depending on your certification requirements.Latest
Firmware version policyReceive the latest available firmware or a Common Criteria-certified version, depending on your certification requirements.Latest
Firmware version policyReceive the latest available firmware or a Common Criteria-certified version, depending on your certification requirements.Latest
Firmware version policyReceive the latest available firmware or a Common Criteria-certified version, depending on your certification requirements.CC-Certified
Firmware version policyReceive the latest available firmware or a Common Criteria-certified version, depending on your certification requirements.Custom
Audit supportPrepare for external compliance and security audits with the level of assistance your requirements demand.
Audit supportPrepare for external compliance and security audits with the level of assistance your requirements demand.
Audit supportPrepare for external compliance and security audits with the level of assistance your requirements demand.Supports standard regulated audits
Audit supportPrepare for external compliance and security audits with the level of assistance your requirements demand.Supports standard regulated audits
Audit supportPrepare for external compliance and security audits with the level of assistance your requirements demand.
Approved for compliance-critical/qualified use
Audit supportPrepare for external compliance and security audits with the level of assistance your requirements demand.Custom
CC EN 419221-5 EAL4+Meet qualified electronic signature requirements with Common Criteria EAL4+ certified HSMs.
CC EN 419221-5 EAL4+Meet qualified electronic signature requirements with Common Criteria EAL4+ certified HSMs.
CC EN 419221-5 EAL4+Meet qualified electronic signature requirements with Common Criteria EAL4+ certified HSMs.
CC EN 419221-5 EAL4+Meet qualified electronic signature requirements with Common Criteria EAL4+ certified HSMs.
CC EN 419221-5 EAL4+Meet qualified electronic signature requirements with Common Criteria EAL4+ certified HSMs.
CC EN 419221-5 EAL4+Meet qualified electronic signature requirements with Common Criteria EAL4+ certified HSMs.Custom
CC EN 419241-2 eIDASEnable qualified trust services with eIDAS-compliant HSMs certified under EN 419241-2.
CC EN 419241-2 eIDASEnable qualified trust services with eIDAS-compliant HSMs certified under EN 419241-2.
CC EN 419241-2 eIDASEnable qualified trust services with eIDAS-compliant HSMs certified under EN 419241-2.
CC EN 419241-2 eIDASEnable qualified trust services with eIDAS-compliant HSMs certified under EN 419241-2.
CC EN 419241-2 eIDASEnable qualified trust services with eIDAS-compliant HSMs certified under EN 419241-2.
CC EN 419241-2 eIDASEnable qualified trust services with eIDAS-compliant HSMs certified under EN 419241-2.Custom
Custom Firmware Update WindowSchedule firmware updates within a maintenance window that fits your operational requirements.
Custom Firmware Update WindowSchedule firmware updates within a maintenance window that fits your operational requirements.
Custom Firmware Update WindowSchedule firmware updates within a maintenance window that fits your operational requirements.
Custom Firmware Update WindowSchedule firmware updates within a maintenance window that fits your operational requirements.
Custom Firmware Update WindowSchedule firmware updates within a maintenance window that fits your operational requirements.
Custom Firmware Update WindowSchedule firmware updates within a maintenance window that fits your operational requirements.
Storage capacity (MB)Store your cryptographic keys and objects with dedicated storage capacity.
Storage capacity (MB)Store your cryptographic keys and objects with dedicated storage capacity.10
Storage capacity (MB)Store your cryptographic keys and objects with dedicated storage capacity.1
Storage capacity (MB)Store your cryptographic keys and objects with dedicated storage capacity.10
Storage capacity (MB)Store your cryptographic keys and objects with dedicated storage capacity.10
Storage capacity (MB)Store your cryptographic keys and objects with dedicated storage capacity.120
Key objects storageStore your cryptographic keys and objects with the capacity your workload requires. RSA-4096 asymmetric key pairs.Calculate
Key objects storageStore your cryptographic keys and objects with the capacity your workload requires. RSA-4096 asymmetric key pairs.up to 200
Key objects storageStore your cryptographic keys and objects with the capacity your workload requires. RSA-4096 asymmetric key pairs.3-200
Key objects storageStore your cryptographic keys and objects with the capacity your workload requires. RSA-4096 asymmetric key pairs.up to 200
Key objects storageStore your cryptographic keys and objects with the capacity your workload requires. RSA-4096 asymmetric key pairs.up to 200
Key objects storageStore your cryptographic keys and objects with the capacity your workload requires. RSA-4096 asymmetric key pairs.Unlimited
Expandable storageExpand your storage capacity as your key and object requirements grow.
Expandable storageExpand your storage capacity as your key and object requirements grow.*
Expandable storageExpand your storage capacity as your key and object requirements grow.
Expandable storageExpand your storage capacity as your key and object requirements grow.*
Expandable storageExpand your storage capacity as your key and object requirements grow.*
Expandable storageExpand your storage capacity as your key and object requirements grow.*
Performance (Sig./Min)Process cryptographic signatures at the speed your workload requires.
Performance (Sig./Min)Process cryptographic signatures at the speed your workload requires.Best effort
Performance (Sig./Min)Process cryptographic signatures at the speed your workload requires.
Performance (Sig./Min)Process cryptographic signatures at the speed your workload requires.Up to 600
Performance (Sig./Min)Process cryptographic signatures at the speed your workload requires.Up to 600
Performance (Sig./Min)Process cryptographic signatures at the speed your workload requires.Up to 12 000
Additional ThroughputIncrease your cryptographic throughput as your workload grows.
Additional ThroughputIncrease your cryptographic throughput as your workload grows.
Additional ThroughputIncrease your cryptographic throughput as your workload grows.
Additional ThroughputIncrease your cryptographic throughput as your workload grows.*
Additional ThroughputIncrease your cryptographic throughput as your workload grows.*
Additional ThroughputIncrease your cryptographic throughput as your workload grows.
Partition AdministrationManage your HSM partition remotely using the Decanus Terminal (Physical device).
Partition AdministrationManage your HSM partition remotely using the Decanus Terminal (Physical device).
Partition AdministrationManage your HSM partition remotely using the Decanus Terminal (Physical device).
Partition AdministrationManage your HSM partition remotely using the Decanus Terminal (Physical device).*
Partition AdministrationManage your HSM partition remotely using the Decanus Terminal (Physical device).*
Partition AdministrationManage your HSM partition remotely using the Decanus Terminal (Physical device).*
Smart Key AttributesPatented technologyControl how your keys are used directly at the HSM level, rather than relying on your application.
Smart Key AttributesPatented technologyControl how your keys are used directly at the HSM level, rather than relying on your application.
Smart Key AttributesPatented technologyControl how your keys are used directly at the HSM level, rather than relying on your application.
Smart Key AttributesPatented technologyControl how your keys are used directly at the HSM level, rather than relying on your application.*
Smart Key AttributesPatented technologyControl how your keys are used directly at the HSM level, rather than relying on your application.*
Smart Key AttributesPatented technologyControl how your keys are used directly at the HSM level, rather than relying on your application.
Transaction Security Broker (TSB)Enforce key-use policies with multi-party approval workflows, quorums, and timelocks.
Transaction Security Broker (TSB)Enforce key-use policies with multi-party approval workflows, quorums, and timelocks.
Transaction Security Broker (TSB)Enforce key-use policies with multi-party approval workflows, quorums, and timelocks.
Transaction Security Broker (TSB)Enforce key-use policies with multi-party approval workflows, quorums, and timelocks.*
Transaction Security Broker (TSB)Enforce key-use policies with multi-party approval workflows, quorums, and timelocks.*
Transaction Security Broker (TSB)Enforce key-use policies with multi-party approval workflows, quorums, and timelocks.*
Authorization appApprove key operations using multi-authorization policies from iOS or Android.
Authorization appApprove key operations using multi-authorization policies from iOS or Android.
Authorization appApprove key operations using multi-authorization policies from iOS or Android.
Authorization appApprove key operations using multi-authorization policies from iOS or Android.
Authorization appApprove key operations using multi-authorization policies from iOS or Android.
Authorization appApprove key operations using multi-authorization policies from iOS or Android.
Timestamp serviceProve exactly when a document or transaction was signed with a verifiable timestamp.
Timestamp serviceProve exactly when a document or transaction was signed with a verifiable timestamp.
Timestamp serviceProve exactly when a document or transaction was signed with a verifiable timestamp.
Timestamp serviceProve exactly when a document or transaction was signed with a verifiable timestamp.*
Timestamp serviceProve exactly when a document or transaction was signed with a verifiable timestamp.*
Timestamp serviceProve exactly when a document or transaction was signed with a verifiable timestamp.
PQC AlgorithmsProtect your data against future quantum attacks with quantum-resistant cryptographic algorithms.
PQC AlgorithmsProtect your data against future quantum attacks with quantum-resistant cryptographic algorithms.
PQC AlgorithmsProtect your data against future quantum attacks with quantum-resistant cryptographic algorithms.
PQC AlgorithmsProtect your data against future quantum attacks with quantum-resistant cryptographic algorithms.
PQC AlgorithmsProtect your data against future quantum attacks with quantum-resistant cryptographic algorithms.
PQC AlgorithmsProtect your data against future quantum attacks with quantum-resistant cryptographic algorithms.
Crypto Asset ExtensionSecure your cryptocurrency keys with blockchain-specific algorithms supporting Bitcoin, Ethereum, Cardano, and more.
Crypto Asset ExtensionSecure your cryptocurrency keys with blockchain-specific algorithms supporting Bitcoin, Ethereum, Cardano, and more.
Crypto Asset ExtensionSecure your cryptocurrency keys with blockchain-specific algorithms supporting Bitcoin, Ethereum, Cardano, and more.
Crypto Asset ExtensionSecure your cryptocurrency keys with blockchain-specific algorithms supporting Bitcoin, Ethereum, Cardano, and more.*
Crypto Asset ExtensionSecure your cryptocurrency keys with blockchain-specific algorithms supporting Bitcoin, Ethereum, Cardano, and more.
Crypto Asset ExtensionSecure your cryptocurrency keys with blockchain-specific algorithms supporting Bitcoin, Ethereum, Cardano, and more.*
Signature Activation Module (SAM)Authenticate the signer before using a key for a qualified signature.
Signature Activation Module (SAM)Authenticate the signer before using a key for a qualified signature.
Signature Activation Module (SAM)Authenticate the signer before using a key for a qualified signature.
Signature Activation Module (SAM)Authenticate the signer before using a key for a qualified signature.
Signature Activation Module (SAM)Authenticate the signer before using a key for a qualified signature.*
Signature Activation Module (SAM)Authenticate the signer before using a key for a qualified signature.*
Securosys VaultCodePatented technologyRun custom code inside the HSM with HSM-backed security and attested execution.
Securosys VaultCodePatented technologyRun custom code inside the HSM with HSM-backed security and attested execution.
Securosys VaultCodePatented technologyRun custom code inside the HSM with HSM-backed security and attested execution.
Securosys VaultCodePatented technologyRun custom code inside the HSM with HSM-backed security and attested execution.
Securosys VaultCodePatented technologyRun custom code inside the HSM with HSM-backed security and attested execution.
Securosys VaultCodePatented technologyRun custom code inside the HSM with HSM-backed security and attested execution.‡
JurisdictionKeep your data protected within a robust regulatory framework, backed by ISO/IEC 27001:2022-certified operations.
JurisdictionKeep your data protected within a robust regulatory framework, backed by ISO/IEC 27001:2022-certified operations.Switzerland
JurisdictionKeep your data protected within a robust regulatory framework, backed by ISO/IEC 27001:2022-certified operations.Switzerland
JurisdictionKeep your data protected within a robust regulatory framework, backed by ISO/IEC 27001:2022-certified operations.Switzerland
JurisdictionKeep your data protected within a robust regulatory framework, backed by ISO/IEC 27001:2022-certified operations.Switzerland
JurisdictionKeep your data protected within a robust regulatory framework, backed by ISO/IEC 27001:2022-certified operations.Switzerland
Key residencyChoose the physical location of your HSM partition and key material.
Key residencyChoose the physical location of your HSM partition and key material.United States, Switzerland & Singapore
Key residencyChoose the physical location of your HSM partition and key material.United States, Germany & Singapore
Key residencyChoose the physical location of your HSM partition and key material.United States, Germany & Singapore
Key residencyChoose the physical location of your HSM partition and key material.Switzerland or United States
Key residencyChoose the physical location of your HSM partition and key material.Custom
Disaster Recovery SiteProtect your operations with an additional disaster recovery site designed for extreme resilience.
Disaster Recovery SiteProtect your operations with an additional disaster recovery site designed for extreme resilience.
Disaster Recovery SiteProtect your operations with an additional disaster recovery site designed for extreme resilience.
Disaster Recovery SiteProtect your operations with an additional disaster recovery site designed for extreme resilience.
Disaster Recovery SiteProtect your operations with an additional disaster recovery site designed for extreme resilience.
Disaster Recovery SiteProtect your operations with an additional disaster recovery site designed for extreme resilience.*
Self-Service BackupCreate and store a backup of your HSM data.
Self-Service BackupCreate and store a backup of your HSM data.
Self-Service BackupCreate and store a backup of your HSM data.
Self-Service BackupCreate and store a backup of your HSM data.
Self-Service BackupCreate and store a backup of your HSM data.
Self-Service BackupCreate and store a backup of your HSM data.*
Automated BackupAutomatically back up your HSM partition and data on a daily basis.
Automated BackupAutomatically back up your HSM partition and data on a daily basis.
Automated BackupAutomatically back up your HSM partition and data on a daily basis.
Automated BackupAutomatically back up your HSM partition and data on a daily basis.
Automated BackupAutomatically back up your HSM partition and data on a daily basis.
Automated BackupAutomatically back up your HSM partition and data on a daily basis.*
Data RestorationRestore your partition data from recent backups.
Data RestorationRestore your partition data from recent backups.
Data RestorationRestore your partition data from recent backups.*
Data RestorationRestore your partition data from recent backups.*
Data RestorationRestore your partition data from recent backups.*
Data RestorationRestore your partition data from recent backups.*
Offline Maintenance BackupEntrust Securoys to create a backup of your partition and store it in a secure Swiss vault.
Offline Maintenance BackupEntrust Securoys to create a backup of your partition and store it in a secure Swiss vault.
Offline Maintenance BackupEntrust Securoys to create a backup of your partition and store it in a secure Swiss vault.
Offline Maintenance BackupEntrust Securoys to create a backup of your partition and store it in a secure Swiss vault.
Offline Maintenance BackupEntrust Securoys to create a backup of your partition and store it in a secure Swiss vault.
Offline Maintenance BackupEntrust Securoys to create a backup of your partition and store it in a secure Swiss vault.*
24/7 Support & EscalationKeep your operations running with 24/7 support, defined response times, and dedicated escalation paths.
24/7 Support & EscalationKeep your operations running with 24/7 support, defined response times, and dedicated escalation paths.Best effort
24/7 Support & EscalationKeep your operations running with 24/7 support, defined response times, and dedicated escalation paths.
24/7 Support & EscalationKeep your operations running with 24/7 support, defined response times, and dedicated escalation paths.
24/7 Support & EscalationKeep your operations running with 24/7 support, defined response times, and dedicated escalation paths.
24/7 Support & EscalationKeep your operations running with 24/7 support, defined response times, and dedicated escalation paths.