The startup provides encryption infrastructure that enables developers to deploy applications within hardware-hardened containers, ensuring robust data privacy. This platform allows software developers to concentrate on product development without the burden of security concerns.
Funding
$22.2M raised to dateRaised to date based on public sources. This may differ from the amount the company actually raised and is based only on what is publicly available on the internet.
Founders
Product
Problem
Many applications handle sensitive data, such as payment information, which creates significant security and compliance burdens for developers. Traditional security measures can be complex and costly to implement, diverting resources from core product development.
Solution
Evervault provides a suite of encryption and tokenization tools designed to simplify data security and compliance for developers. The platform allows developers to securely collect, process, and share sensitive data, such as credit card information and banking details, without directly handling it in plaintext. Evervault's solutions include UI components for secure data collection, a relay for encrypting data in transit, functions for secure serverless computation, and enclaves for deploying applications within hardware-hardened containers. By using Evervault, companies can reduce their PCI scope, streamline compliance with regulations like HIPAA and DORA, and minimize the risk of data breaches.
Target Audience
Evervault targets software developers and engineering teams building applications that handle sensitive data, particularly in the fintech, e-commerce, and healthcare industries, who need to meet stringent security and compliance requirements.
Features
- UI Components: Customizable, pre-built forms for collecting and displaying cardholder data without exposing it in plaintext.
- Relay: An encryption proxy that secures data in transit within network requests.
- Functions: Secure serverless functions that enable running logic on encrypted data outside of the user's infrastructure.
- Enclaves: Allows deployment of Docker containers to secure enclaves, ensuring code integrity and data isolation.
- Tokenization: Flexible card tokenization for optimizing payment flows and reducing PCI DSS scope.
- Network Tokens API: Reduces fraud rates and increases authorization rates.
- Key Management: Secure key management and recovery flows for wallets, backed by secure enclaves.
- Dual-Custody Model: Stores encrypted card data without the keys, and stores the keys without the encrypted cards.
- PCI Compliance Tools: Reduces PCI scope to SAQ A control set.