IBM Cloud Secrets Manager

IBMSecurityFree tier available

Centralised management of API keys, credentials, certificates and other secrets with dynamic secrets, rotation and IAM-based access control

Jurisdictional exposure

Provider HQ
USArmonk, USA

Subject to CLOUD Act, FISA-702, DPF

Region locations
APACEUUKUSOther13 regions across 5 jurisdictions
Sovereign option
No sovereign-flagged regions in the catalogue for this service.

Sub-services (4)

IAM credentials

Dynamically generated service IDs and API keys with a lease duration

Certificates

Imported, public and private TLS certificates with automatic renewal

Secret groups

Collections of secrets with shared IAM access policies

Arbitrary and key-value secrets

Storage of custom credentials, tokens and structured values

Compliance & Certifications

This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.

Where this runs

13 regions
9 countries
Commercial regions (13)

Europe (3)

  • Frankfurt
  • Madrid
  • London

North America (4)

  • Montreal
  • Toronto
  • Dallas
  • Washington DC

South America (1)

  • São Paulo

Asia (4)

  • Chennai
  • Mumbai - Airtel
  • Osaka
  • Tokyo

Oceania (1)

  • Sydney

Tags

Equivalent services on other platforms

Key Management ServiceAlibaba

Managed key and secrets service with software and hardware-backed (HSM) key management, envelope encryption for Alibaba Cloud services, automatic rotation and dedicated KMS instances

AWS Secrets ManagerAWS

Fully managed service to store, rotate, and audit secrets such as database credentials, API keys, and OAuth tokens with native rotation Lambda integrations for RDS, Redshift, and DocumentDB

Azure Key VaultAzure

Centralised vault for cryptographic keys, secrets, and certificates with HSM-backed keys, managed certificate renewal, and RBAC or access-policy enforcement

Bleu Key VaultBleu

Managed key, secret and certificate store: Azure Key Vault operated by Bleu from data centres located exclusively in France, keeping keys within the Bleu perimeter.

Secret ManagerGCP

Fully managed secret storage with automatic replication across regions, VPC Service Controls integration, CMEK encryption, version history, per-secret IAM, and rotation via Cloud Scheduler plus Cloud Run hooks — used by GKE, Cloud Run, and Compute Engine workloads

Huawei Data Encryption Workshop (DEW)Huawei

Unified cryptographic services including Key Management Service for envelope encryption, Cloud Secret Management Service for secret storage and rotation, Key Pair Service for SSH key management, and Dedicated HSM for FIPS 140-2 Level 3 workloads

NumSpot Managed Secret ManagerNumSpot

Managed secrets store for credentials, keys and other sensitive configuration on NumSpot's sovereign platform; SecNumCloud PaaS qualification in progress (J0/J1 passed May 2026)

OpenStack BarbicanOpenStack

Key management service for symmetric and asymmetric keys, certificates, and other secret material — pluggable backends include software KMS, HSM via PKCS#11, Vault, and KMIP-compliant appliances. Equivalent to AWS KMS / Azure Key Vault / Cloud KMS in the cross-provider mapping

OCI VaultOracle

Centralised key and secret management service with HSM-backed symmetric and asymmetric keys, automatic rotation, and envelope encryption for OCI resources

OVHcloud Secret ManagerOVHcloud

Managed secrets vault with a REST API and HashiCorp Vault KV2-compatible API. It has native OVHcloud IAM integration, audit logs via Logs Data Platform, and is billed per secret version per month.

Scaleway Secret ManagerScaleway

Encrypted storage for application secrets (API keys, database credentials, certificates) with versioning, rotation, and access-control via IAM policies

STACKIT Secrets ManagerSTACKIT

Vault-compatible encrypted storage for application secrets (API keys, credentials, certificates) with per-secret versioning and access control via ACLs and AppRole authentication

Pricing

Pricing model:pay-as-you-go