Azure Payment HSM
Secure digital payments in the cloud with a payment Hardware Security Module (HSM) service.
Overview
Accelerate the digital transformation of your payment ecosystem
Azure Payment HSM is a bare metal infrastructure as a service (IaaS) that provides cryptographic key operations for real-time payment transactions in Azure. It's delivered using Thales payShield 10K payment HSMs and meets the most stringent payment card industry (PCI) requirements for security, compliance, low latency, and high performance.
- Maintain security and compliance standards for your PCI environments in the cloud. Azure datacenters that house Azure Payment HSM solutions are PCI DSS and PCI 3DS compliant, and the service uses Thales payShield 10K HSMs, which are FIPS 140-2 Level 3 and PCI HSM v3 certified. This allows you to simplify ongoing security audit compliance and increase your security posture.
- Maintain full administrative control of your PCI environment in the cloud with single-tenant, self-managed HSMs. Once the HSM is allocated to your subscription, Microsoft has no access to your data. When the HSM is no longer required and the device is returned to Microsoft, your data is erased to ensure complete privacy and security.
- Lift and shift your applications to the cloud and ensure low latency and high performance for mission-critical payment applications. Take advantage of the latest certified hardware and software on demand and lower upfront investment with the OPEX subscription model.
Features
Secure cloud HSM with compliance and control
Compliance
Certified as PCI PIN, PCI 3DS and PCI DSS compliant
Assurance
FIPS 140-2 level 3 and PCI HSM v3 certified HSM
Custody
Full administrative and cryptographic control of the HSM
Throughput
High performance and low latency with cloud scale and global redundancy
Security
Embedded security and compliance
34,000
Full-time equivalent engineers dedicated to security initiatives at Microsoft.
15,000
Partners with specialized security expertise.
>100
Compliance certifications, including over 50 specific to global regions and countries.
Pricing
Azure Payment HSM pricing
Azure payment HSM uses a pay-as-you-go pricing model with an hourly billing meter that records number of HSM resources, performance speed, timespan, and other factors. You'll be billed monthly and will be able to upgrade or downgrade performance level on demand to meet your business needs.
Frequently asked questions
- Azure Payment HSM is available in East US, West US, South Central US, Central US, North Europe, West Europe regions.
- After HSMs are provisioned, they're connected directly to a user's virtual network, and HSMs are under users' sole administrative control. HSMs can be provisioned as a pair of devices and configured for high availability. The service uses Thales payShield Manager for secure remote access to the HSM.
- Financial institutions and service providers in the payment ecosystem including issuers, service providers, acquirers, processors, and payment networks would benefit from Azure Payment HSM.
- With benefits including low latency and the ability to quickly add more HSM capacity as required, Azure Payment HSM is a perfect fit for a broad range of use cases, including payment processing, payment credential issuing, securing keys and authentication data, and sensitive data protection.
- As Azure Payment HSM is a specialized service, customers should ask their Microsoft account manager and CSA to send the request via email.
Next steps
Choose the Azure account that’s right for you
Pay as you go or try Azure free for up to 30 days.
Azure Solutions
Azure cloud solutions
Solve your business problems with proven combinations of Azure cloud services, as well as sample architectures and documentation.
Business Solutions Hub
Find the right Microsoft Cloud solution
Browse the Microsoft Business Solutions Hub to find the products and solutions that can help your organization reach its goals.
Explore Azure Portal 
