Simplified Hybrid Cloud and Multi-Cloud Encryption

Managing encryption for five or six different hybrid, public cloud, and on-premises environments increases complexity, cost, and security risk. As workloads move to the cloud, keeping cryptographic keys and shared secrets secure as well as making them available to applications and services regardless of where they run, is critical to successful digital transformation.

Problem

According to Gartner, 70% of businesses are adopting a hybrid cloud and multi-cloud strategy to augment their internal datacenters. The challenges of protecting data and using encryption for multiple hybrid, public cloud, and on-premises environments increases complexity, cost, and security risk. As workloads and sensitive data move to the cloud, keeping cryptographic keys, shared secrets and tokens secure is critical to secure public cloud deployments and successful digital transformation.

Solution: Control the Keys to the Cloud

Fortanix protects sensitive data across public, hybrid, multi, and private cloud environments, enabling customers to securely operate even the most sensitive applications in any environment. Fortanix encrypts data everywhere — at rest, in motion, and in use — and provides single point of management and control for all encryption keys, secrets and tokens.

Surveys show that about 70% of enterprises are adopting multiple IaaS/PaaS providers by design. Information security should provide consistent security policy management, configuration and compliance across a hybrid, multicloud environment.

Gartner, How to Make Cloud More Secure Than Your Own Data Center, Neil MacDonald October 9th, 2019

Bring Your Own Key Management System (BYOKMS)

While many cloud service providers have allowed customers to bring their own keys (BYOK), Fortanix is the first solution to enable customers to bring their own key management system (BYOKMS) where encryption keys can be stored in their own datacenters with a single point of management and auditability. When customers control their own keys, they can move applications bound by compliance requirements such as the Payment Card Industry Data Security Standard (PCI DSS) to the public cloud for the first time.

Compliance for Sensitive Workloads in Public Cloud with FIPS 140-2 Level 3 Protection

Many companies want to move to the public cloud but are held back by regulators who insist that they manage their own keys and secure them by storing them in FIPS 140-2 Level 3 certified hardware security modules (HSM). Fortanix DSM offers a FIPS 140-2 Level 3 validated Fortanix Runtime Encryption Appliance enabling financial services, healthcare, and other regulated industries to meet their compliance requirements.