Programmable KMS & Signing

Keys that never leave. Used only by your rules.

Generate and hold keys inside the enclave. Signing and decryption run through policy: quorum approvals, passkey confirmation, spending limits and time locks. Every use is receipted.

Start free on Calimero Cloud Book a walkthrough

Keys & identity · Works with Conditional Release, Data Vault & Tokenization, Verifiable Audit Log · Same meters as every product

02 · Use case

Keys your customers control

Who it's for: SaaS vendors with enterprise customers.

Today

Enterprise customers increasingly ask to hold the keys that encrypt their data. Building per-customer key management is hard, and keys in the vendor's own KMS still answer to the vendor.

With Programmable KMS & Signing

Each customer's key is generated inside the enclave and used only under a policy the customer controls, such as a passkey approval or a revocation. Every use of the key is receipted.

What you get

Customers hold the policy over their own keys
Keys that never leave the enclave
A receipt for every use

03 · How it works

Four steps, all inside attested nodes.

01 · Generate
Keys are created inside the enclave and never leave it.
02 · Write policy
Quorums, passkeys, limits and time locks, in code.
03 · Approve
Each use goes through the policy before the key signs.
04 · Prove
Every signature and decryption is receipted.

04 · Built in

What it inherits from the engine.

Programmable KMS & Signing runs on the same confidential engine as every Calimero product, so it comes with the same proof.

Attested hardware. Clients verify the node's image before sending anything.
Sealed end to end. Nobody, including us, can read data inside a sealed node.
Signed receipts. Every answer can be checked offline, later, by anyone.

How we prove it All products

05 · More in Keys & identity

Works on the same engine.

Claims EngineProve "over 18". Never see the ID.

See Programmable KMS & Signing running on attested hardware.

Book a technical walkthrough and we'll map your data flow, or start free on Calimero Cloud.

Book a walkthrough Start free on Calimero Cloud