Start on Cloud

Home / Products / Store data

Data Vault & Tokenization

Keep the real values in one place. Give your stack tokens.

Store a sensitive value and get back a token, format-preserving if you need it. Detokenizing is checked per caller, purpose and field, and every detokenize comes with a signed receipt.

Start free on Calimero Cloud Book a walkthrough

Store data · Works with Confidential Gateway, Confidential Pipelines, Verifiable Audit Log · Same meters as every product

02 · Use case

Taking card numbers out of your stack

Who it's for: E-commerce and payments companies.

Today

Every system that stores or touches a card number falls inside PCI scope: the database, the logs, the support tools, the analytics. Each one adds audits and risk.

With Data Vault & Tokenization

Card numbers go straight to the Vault over a sealed channel and come back as format-preserving tokens your systems store instead. When a payment needs the real number, detokenizing is checked against policy for that caller and purpose, inside the enclave, and receipted.

What you get

  • Card numbers never touch your servers
  • A smaller PCI scope
  • A receipt for every detokenize

03 · How it works

Four steps, all inside attested nodes.

  1. 01 · Store

    Send the real value over a sealed channel; it never leaves the enclave.

  2. 02 · Tokenize

    Get a token back, format-preserving so existing schemas keep working.

  3. 03 · Detokenize

    Only under policy, checked per caller, purpose and field.

  4. 04 · Prove

    Each detokenize is signed by an attested key and checkable offline.

04 · Built in

What it inherits from the engine.

Data Vault & Tokenization runs on the same confidential engine as every Calimero product, so it comes with the same proof.

  • Attested hardware. Clients verify the node's image before sending anything.
  • Sealed end to end. Nobody, including us, can read data inside a sealed node.
  • Signed receipts. Every answer can be checked offline, later, by anyone.
How we prove itAll products

05 · More in Store data

Works on the same engine.

See Data Vault & Tokenization running on attested hardware.

Book a technical walkthrough and we'll map your data flow, or start free on Calimero Cloud.

Book a walkthrough Start free on Calimero Cloud