Jurisdictional exposure
Sub-services (2)
Customer-Managed Keys
Encryption keys with customer-controlled rotation
Envelope Encryption
Two-tier encryption with data keys wrapped by master keys
Compliance & Certifications
This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.
Where this runs
Sovereign regions (2)
- Europe 1 (Frankenthal) · FrankenthalSTACKIT EU Sovereign Cloud (DE)
- Europe 2 (Heilbronn) · HeilbronnSTACKIT EU Sovereign Cloud (DE)
Tags
Equivalent services on other platforms
Create and manage cryptographic keys for encryption at rest and in transit with AWS-managed, customer-managed, and imported keys, automatic rotation, and FIPS 140-2 validated HSMs
Centralised vault for cryptographic keys, secrets, and certificates with HSM-backed keys, managed certificate renewal, and RBAC or access-policy enforcement
Cloud-hosted key management for encryption at rest with symmetric and asymmetric keys, customer-supplied keys, HSM-backed keys, and automatic rotation
Centralised key and secret management service with HSM-backed symmetric and asymmetric keys, automatic rotation, and envelope encryption for OCI resources
Managed encryption-key service for envelope encryption, with customer-managed keys (CMKs), HSM-backed key generation, and integration with Object Storage and Block Storage for at-rest encryption