Azure Payment HSM Preview
Secure digital payments in the cloud with a payment Hardware Security Module (HSM) service
Accelerate the digital transformation of your payment ecosystem
Azure Payment HSM is a bare metal infrastructure as a service (IaaS) that provides cryptographic key operations for real-time payment transactions in Azure. It's delivered using Thales payShield 10K payment HSMs and meets the most stringent payment card industry (PCI) requirements for security, compliance, low latency, and high performance.
Certified as PCI 3DS and PCI DSS compliant
FIPS 140-2 level 3 and PCI HSM v3 certified HSM
Full administrative and cryptographic control of the HSM
High performance and low latency with cloud scale and global redundancy
Enhance security and compliance
Maintain security and compliance standards for your PCI environments in the cloud. Azure datacenters that house Azure Payment HSM solutions are PCI DSS and PCI 3DS compliant, and the service uses Thales payShield 10K HSMs, which are FIPS 140-2 Level 3 and PCI HSM v3 certified. This allows you to simplify ongoing security audit compliance and increase your security posture.
Manage your payment HSM in Azure
Maintain full administrative control of your PCI environment in the cloud with single-tenant, self-managed HSMs. Once the HSM is allocated to your subscription, Microsoft has no access to your data. When the HSM is no longer required and the device is returned to Microsoft, your data is erased to ensure complete privacy and security.
Start your digital transformation in the cloud
Lift and shift your applications to the cloud and ensure low latency and high performance for mission-critical payment applications. Take advantage of the latest certified hardware and software on demand and lower upfront investment with the OPEX subscription model.
Comprehensive security and compliance, built in
Microsoft invests more than USD 1 billion annually on cybersecurity research and development.
We employ more than 3,500 security experts dedicated to data security and privacy.
Azure has more certifications than any other cloud provider. View the comprehensive list.
Azure Payment HSM pricing
Azure payment HSM uses a pay-as-you-go pricing model with an hourly billing meter that records number of HSM resources, performance speed, timespan, and other factors. You'll be billed monthly and will be able to upgrade or downgrade performance level on demand to meet your business needs.
Get started with an Azure free account
Start free. Get $200 credit to use within 30 days. While you have your credit, get free amounts of many of our most popular services, plus free amounts of 40+ other services that are always free.
After your credit, move to pay as you go to keep building with the same free services. Pay only if you use more than your free monthly amounts.
After 12 months, you'll keep getting 40+ always-free services—and still pay only for what you use beyond your free monthly amounts.
Azure Payment HSM resources and documentation
Explore technical documentation
Learn more about Azure Payment HSM in our blog.
Frequently asked questions about Azure Payment HSM Preview
Azure Payment HSM is available for preview in East US and North Europe regions.
After HSMs are provisioned, they're connected directly to a user's virtual network, and HSMs are under users' sole administrative control. HSMs can be provisioned as a pair of devices and configured for high availability. The service uses Thales payShield Manager for secure remote access to the HSM.
Financial institutions and service providers in the payment ecosystem including issuers, service providers, acquirers, processors, and payment networks would benefit from Azure Payment HSM.
With benefits including low latency and the ability to quickly add more HSM capacity as required, Azure Payment HSM is a perfect fit for a broad range of use cases, including payment processing, payment credential issuing, securing keys and authentication data, and sensitive data protection.
As Azure Payment HSM is a specialized service, you can request access via email.