Compare CloudHSM plans & features

Uptime guaranteeRely on guaranteed service availability with defined uptime commitments.

Uptime guaranteeRely on guaranteed service availability with defined uptime commitments.Best effort

Uptime guaranteeRely on guaranteed service availability with defined uptime commitments.99.9%

DDoS protectionKeep your HSM service reachable during volumetric and application-layer attacks.

Production useRun your critical workloads in production with confidence.

Qualified useProve to third parties that your cryptographic keys are securely stored in the HSM.

Dedicated HSMIsolate your cryptographic operations on a dedicated HSM for greater control and security.

FIPS 140-3 Level 3 hardwareProtect your cryptographic keys with tamper-resistant hardware and controlled key access.

Firmware version policyReceive the latest available firmware or a Common Criteria-certified version, depending on your certification requirements.

Firmware version policyReceive the latest available firmware or a Common Criteria-certified version, depending on your certification requirements.Latest

Firmware version policyReceive the latest available firmware or a Common Criteria-certified version, depending on your certification requirements.CC-Certified

Firmware version policyReceive the latest available firmware or a Common Criteria-certified version, depending on your certification requirements.Custom

Audit supportPrepare for external compliance and security audits with the level of assistance your requirements demand.

Audit supportPrepare for external compliance and security audits with the level of assistance your requirements demand.Supports standard regulated audits

Audit supportPrepare for external compliance and security audits with the level of assistance your requirements demand.

Approved for compliance-critical/qualified use

Audit supportPrepare for external compliance and security audits with the level of assistance your requirements demand.Custom

CC EN 419221-5 EAL4+Meet qualified electronic signature requirements with Common Criteria EAL4+ certified HSMs.

CC EN 419221-5 EAL4+Meet qualified electronic signature requirements with Common Criteria EAL4+ certified HSMs.Custom

CC EN 419241-2 eIDASEnable qualified trust services with eIDAS-compliant HSMs certified under EN 419241-2.

CC EN 419241-2 eIDASEnable qualified trust services with eIDAS-compliant HSMs certified under EN 419241-2.Custom

Custom Firmware Update WindowSchedule firmware updates within a maintenance window that fits your operational requirements.

Storage capacity (MB)Store your cryptographic keys and objects with dedicated storage capacity.

Storage capacity (MB)Store your cryptographic keys and objects with dedicated storage capacity.10

Storage capacity (MB)Store your cryptographic keys and objects with dedicated storage capacity.1

Storage capacity (MB)Store your cryptographic keys and objects with dedicated storage capacity.10

Storage capacity (MB)Store your cryptographic keys and objects with dedicated storage capacity.120

Key objects storageStore your cryptographic keys and objects with the capacity your workload requires. RSA-4096 asymmetric key pairs.Calculate

Key objects storageStore your cryptographic keys and objects with the capacity your workload requires. RSA-4096 asymmetric key pairs.up to 200

Key objects storageStore your cryptographic keys and objects with the capacity your workload requires. RSA-4096 asymmetric key pairs.3-200

Key objects storageStore your cryptographic keys and objects with the capacity your workload requires. RSA-4096 asymmetric key pairs.up to 200

Key objects storageStore your cryptographic keys and objects with the capacity your workload requires. RSA-4096 asymmetric key pairs.Unlimited

Expandable storageExpand your storage capacity as your key and object requirements grow.

Expandable storageExpand your storage capacity as your key and object requirements grow.*

Expandable storageExpand your storage capacity as your key and object requirements grow.

Expandable storageExpand your storage capacity as your key and object requirements grow.*

Performance (Sig./Min)Process cryptographic signatures at the speed your workload requires.

Performance (Sig./Min)Process cryptographic signatures at the speed your workload requires.Best effort

Performance (Sig./Min)Process cryptographic signatures at the speed your workload requires.

Performance (Sig./Min)Process cryptographic signatures at the speed your workload requires.Up to 600

Performance (Sig./Min)Process cryptographic signatures at the speed your workload requires.Up to 12 000

Additional ThroughputIncrease your cryptographic throughput as your workload grows.

Additional ThroughputIncrease your cryptographic throughput as your workload grows.*

Additional ThroughputIncrease your cryptographic throughput as your workload grows.

Partition AdministrationManage your HSM partition remotely using the Decanus Terminal (Physical device).

Partition AdministrationManage your HSM partition remotely using the Decanus Terminal (Physical device).*

Smart Key AttributesPatented technologyControl how your keys are used directly at the HSM level, rather than relying on your application.

Smart Key AttributesPatented technologyControl how your keys are used directly at the HSM level, rather than relying on your application.*

Smart Key AttributesPatented technologyControl how your keys are used directly at the HSM level, rather than relying on your application.

Transaction Security Broker (TSB)Enforce key-use policies with multi-party approval workflows, quorums, and timelocks.

Transaction Security Broker (TSB)Enforce key-use policies with multi-party approval workflows, quorums, and timelocks.*

Authorization appApprove key operations using multi-authorization policies from iOS or Android.

Timestamp serviceProve exactly when a document or transaction was signed with a verifiable timestamp.

Timestamp serviceProve exactly when a document or transaction was signed with a verifiable timestamp.*

Timestamp serviceProve exactly when a document or transaction was signed with a verifiable timestamp.

PQC AlgorithmsProtect your data against future quantum attacks with quantum-resistant cryptographic algorithms.

Crypto Asset ExtensionSecure your cryptocurrency keys with blockchain-specific algorithms supporting Bitcoin, Ethereum, Cardano, and more.

Crypto Asset ExtensionSecure your cryptocurrency keys with blockchain-specific algorithms supporting Bitcoin, Ethereum, Cardano, and more.*

Crypto Asset ExtensionSecure your cryptocurrency keys with blockchain-specific algorithms supporting Bitcoin, Ethereum, Cardano, and more.

Crypto Asset ExtensionSecure your cryptocurrency keys with blockchain-specific algorithms supporting Bitcoin, Ethereum, Cardano, and more.*

Signature Activation Module (SAM)Authenticate the signer before using a key for a qualified signature.

Signature Activation Module (SAM)Authenticate the signer before using a key for a qualified signature.*

Securosys VaultCodePatented technologyRun custom code inside the HSM with HSM-backed security and attested execution.

Securosys VaultCodePatented technologyRun custom code inside the HSM with HSM-backed security and attested execution.‡

JurisdictionKeep your data protected within a robust regulatory framework, backed by ISO/IEC 27001:2022-certified operations.

JurisdictionKeep your data protected within a robust regulatory framework, backed by ISO/IEC 27001:2022-certified operations.Switzerland

Key residencyChoose the physical location of your HSM partition and key material.

Key residencyChoose the physical location of your HSM partition and key material.United States, Switzerland & Singapore

Key residencyChoose the physical location of your HSM partition and key material.United States, Germany & Singapore

Key residencyChoose the physical location of your HSM partition and key material.Switzerland or United States

Key residencyChoose the physical location of your HSM partition and key material.Custom

Disaster Recovery SiteProtect your operations with an additional disaster recovery site designed for extreme resilience.

Disaster Recovery SiteProtect your operations with an additional disaster recovery site designed for extreme resilience.*

Self-Service BackupCreate and store a backup of your HSM data.

Self-Service BackupCreate and store a backup of your HSM data.*

Automated BackupAutomatically back up your HSM partition and data on a daily basis.

Automated BackupAutomatically back up your HSM partition and data on a daily basis.*

Data RestorationRestore your partition data from recent backups.

Data RestorationRestore your partition data from recent backups.*

Offline Maintenance BackupEntrust Securoys to create a backup of your partition and store it in a secure Swiss vault.

Offline Maintenance BackupEntrust Securoys to create a backup of your partition and store it in a secure Swiss vault.*

24/7 Support & EscalationKeep your operations running with 24/7 support, defined response times, and dedicated escalation paths.

24/7 Support & EscalationKeep your operations running with 24/7 support, defined response times, and dedicated escalation paths.Best effort

24/7 Support & EscalationKeep your operations running with 24/7 support, defined response times, and dedicated escalation paths.

Post-quantum keys, managed online

Want to test Post-Quantum Cryptography?

CloudHSM features

Sandbox

BYOK

Economy

Economy Certified

Platinum

Sandbox

BYOK

Economy

Economy Certified

Platinum

Post-quantum keys, managed online

Want to test Post-Quantum Cryptography?

CloudHSM features

Sandbox

BYOK

Economy

Economy Certified

Platinum

Sandbox

BYOK

Economy

Economy Certified

Platinum

Availability

Compliance & Security

Capacity

Connectivity

Features & Options

Data Residency

Backup & Recovery

Support & Maintenance