FluffyStack toolsJurisdictional exposure
Sub-services (4)
Vault-compatible API
HashiCorp Vault KV2-compatible API alongside the OVHcloud REST API
External Secrets Operator support
Native integration for syncing secrets into Kubernetes
Secret versioning
Every change stored as a new version for tracking and rollback
Audit logs
Real-time and historical access logs via Logs Data Platform
Compliance & Certifications
This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.
Where this runs
Sovereign regions (7)
- GravelinesOVHcloud Sovereign Cloud (EU)
- RoubaixOVHcloud Sovereign Cloud (EU)
- StrasbourgOVHcloud Sovereign Cloud (EU)
- Paris (3-AZ) · ParisOVHcloud Sovereign Cloud (EU)
- Limburg (Frankfurt) · Limburg an der LahnOVHcloud Sovereign Cloud (EU)
- WarsawOVHcloud Sovereign Cloud (EU)
- ErithOVHcloud Sovereign Cloud (UK)
Commercial regions (8)
Europe (1)
- Milan (3-AZ)
North America (4)
- Beauharnois
- Toronto
- Hillsboro
- Vint Hill
Asia (2)
- Mumbai
- Singapore
Oceania (1)
- Sydney
Tags
Equivalent services on other platforms
Managed key and secrets service with software and hardware-backed (HSM) key management, envelope encryption for Alibaba Cloud services, automatic rotation and dedicated KMS instances
Fully managed service to store, rotate, and audit secrets such as database credentials, API keys, and OAuth tokens with native rotation Lambda integrations for RDS, Redshift, and DocumentDB
Centralised vault for cryptographic keys, secrets, and certificates with HSM-backed keys, managed certificate renewal, and RBAC or access-policy enforcement
Managed key, secret and certificate store: Azure Key Vault operated by Bleu from data centres located exclusively in France, keeping keys within the Bleu perimeter.
Fully managed secret storage with automatic replication across regions, VPC Service Controls integration, CMEK encryption, version history, per-secret IAM, and rotation via Cloud Scheduler plus Cloud Run hooks — used by GKE, Cloud Run, and Compute Engine workloads
Unified cryptographic services including Key Management Service for envelope encryption, Cloud Secret Management Service for secret storage and rotation, Key Pair Service for SSH key management, and Dedicated HSM for FIPS 140-2 Level 3 workloads
Centralised management of API keys, credentials, certificates and other secrets with dynamic secrets, rotation and IAM-based access control
Managed secrets store for credentials, keys and other sensitive configuration on NumSpot's sovereign platform; SecNumCloud PaaS qualification in progress (J0/J1 passed May 2026)
Key management service for symmetric and asymmetric keys, certificates, and other secret material — pluggable backends include software KMS, HSM via PKCS#11, Vault, and KMIP-compliant appliances. Equivalent to AWS KMS / Azure Key Vault / Cloud KMS in the cross-provider mapping
Centralised key and secret management service with HSM-backed symmetric and asymmetric keys, automatic rotation, and envelope encryption for OCI resources
Encrypted storage for application secrets (API keys, database credentials, certificates) with versioning, rotation, and access-control via IAM policies
Vault-compatible encrypted storage for application secrets (API keys, credentials, certificates) with per-secret versioning and access control via ACLs and AppRole authentication