← All platforms
FFortanix DSM
Keys inside hardware enclaves, unified across clouds — built for people whose threat model includes the cloud provider.
Confidential computing KMSKeys, secrets, tokenisationBy FortanixSince 2016
- Type
- Confidential computing KMS
- How it works
- Data Security Manager runs key operations inside confidential-computing enclaves rather than conventional HSM appliances, presenting one key management plane across multiple clouds and on-premise. Also covers tokenisation and, increasingly, post-quantum readiness.
- Scope
- Keys, secrets, tokenisation
- Deployment
- SaaS + on-premise
- Hardware / key custody
- Intel SGX enclaves; FIPS 140-2 Level 3
- Pricing*
- Enterprise quote
- Free tier
- No
- Licence
- —
- Best for
- Multi-cloud estates with strict key custody
- Notable
- Enclave-based rather than appliance-based
* Published list pricing at August 2026 (vendor pricing pages, August 2026), not a quote.
Strengths
- One control plane across clouds and on-premise
- Enclave model removes appliance sprawl
- Strong regulated-industry track record
- Tokenisation and PQC in the same platform
Trade-offs
- Enterprise pricing, enterprise sales cycle
- Overspecified for single-cloud teams
- Depends on specific hardware capabilities
- Smaller ecosystem than the hyperscalers
Visit Fortanix DSM → Documentation
Listed for comparison as of August 2026 — not an endorsement, and Fortanix DSM did not pay for placement. See disclosure.
Compare Fortanix DSM with…