Hardware-grade key security · delivered as a service
Your keys live in a dedicated AWS account with exactly one tenant: you.
SanctiKey provisions a FIPS 140-3 backed HSM environment into its own AWS account per customer. Not a shared cluster. Not a logical partition. An account boundary, the strongest isolation AWS offers.
No tiers. No calls. 100K operations a month included.
The isolation model
Everyone else partitions a shared HSM. We hand you the whole building.
The industry default
Shared cluster, logical walls
- Your keys sit beside other tenants’ keys, separated by software policy.
- Noisy or compromised neighbors share your blast radius.
- Audit trails interleave every tenant on the box.
- Leaving means export ceremonies, if export is allowed at all.
SanctiKey
A dedicated AWS account per customer
- The account boundary is the wall: AWS’s strongest isolation primitive.
- Your HSM-backed keys are multi-region and never shared with anyone.
- Every operation lands in an audit trail that is yours alone.
- Exit is a first-class feature: the account, keys and history transfer to you.
From checkout to first signature
Three steps, fully self-serve
01
Subscribe
Verify your email, check out with Stripe. Card data never touches SanctiKey infrastructure.
02
We forge your vault
A dedicated AWS account is provisioned automatically: HSM-backed keys, API endpoints, audit trail. No tickets, no onboarding calls.
03
Call the API
Sign, verify, encrypt, decrypt and issue certificates over authenticated HTTPS. Keys never leave the boundary; operations come to them.
What you can do with it
One API for the cryptography your product already needs
Sign & verify
Code artifacts, documents, tokens. Asymmetric signatures from keys that never leave the HSM boundary.
Encrypt & decrypt
Envelope encryption for your most sensitive data, with rotation handled inside the vault.
Certificates & PKI
Run a private CA: issue, chain and store certificates signed by your own root.
Audit everything
Every operation appends to a tamper-evident trail scoped to exactly one tenant: you.
Pricing
One number to start. No tiers, no sales calls.
A dedicated account with your first HSM-backed key and 100K operations a month. Add keys and operation blocks as you grow; drop them when you don’t need them.
- Additional key (bundles its own 100K ops/mo)$12/mo
- Extra operations, per 100K block$5/mo
- Annual billing1 month free
The exit is the feature
The only key service designed for you to leave
Keyout transfers the entire AWS account to you: keys, certificates, audit history, infrastructure. Not an export ceremony, a change of ownership. Your cryptographic estate was never really ours to keep.
Your keys. Your account. Your exit.
Provision a dedicated HSM environment in minutes, self-serve.