STACKIT Secrets Manager

Name: STACKIT Secrets Manager
Brand: STACKIT

Encrypted storage for application secrets (API keys, database credentials, certificates) with versioning, rotation, and access-control via STACKIT IAM

FluffyStack tools

Add to Service Builder Add to Compare Compare with equivalents Explore STACKIT in Treemap Explore security in Honeycomb See STACKIT regions on the World Map See security as a network Score jurisdiction exposure

Documentation Pricing STACKIT website

Jurisdictional exposure

Provider HQ

EUHeilbronn, Germany

Subject to GDPR, Data Act, DGA

Region locations

EU2 regions

Sovereign option

Yes — 2 sovereign-flagged regions available

Full scorecard for this service →EU lens detail →Sovereign cloud coverage map →

Sub-services (2)

Secrets

Encrypted secret storage with versioning

Rotation

Automatic secret rotation on a configurable schedule

Compliance & Certifications

This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.

GDPR ISO 27001 C5

Where this runs

2 regions

1 country

2sovereign

Sovereign regions (2)

Europe 1 (Frankenthal) · FrankenthalSTACKIT EU Sovereign Cloud (DE)
Europe 2 (Heilbronn) · HeilbronnSTACKIT EU Sovereign Cloud (DE)

Equivalent services on other platforms

AWS Secrets ManagerAWS

Fully managed service to store, rotate, and audit secrets such as database credentials, API keys, and OAuth tokens with native rotation Lambda integrations for RDS, Redshift, and DocumentDB

Azure Key VaultAzure

Centralised vault for cryptographic keys, secrets, and certificates with HSM-backed keys, managed certificate renewal, and RBAC or access-policy enforcement

Secret ManagerGCP

Fully managed secret storage with automatic replication across regions, VPC Service Controls integration, CMEK encryption, version history, per-secret IAM, and rotation via Cloud Scheduler plus Cloud Run hooks — used by GKE, Cloud Run, and Compute Engine workloads

OCI VaultOracle

Centralised key and secret management service with HSM-backed symmetric and asymmetric keys, automatic rotation, and envelope encryption for OCI resources

Scaleway Secret ManagerScaleway

Encrypted storage for application secrets (API keys, database credentials, certificates) with versioning, rotation, and access-control via IAM policies

Pricing

Pricing model:per-secret-month-plus-access