Your Data Deserves
Better Protection
Enigma Vault is a PCI Level 1 and SOC 2 Type II compliant platform for encryption, tokenization, and secure customer data management. Two products. One mission: keep sensitive data safe.
Two Products. Total Protection.
Whether you need a developer API for encryption and tokenization or a turnkey application for managing sensitive customer data, Enigma Vault has you covered.
Enigma Vault API
A developer-first REST API for encrypting, tokenizing, and managing sensitive data. Three purpose-built vaults for cards, data, and files.
- Card Vault: tokenize payment cards and proxy to gateways
- Data Vault: AES-256 field encryption, searchable, batch up to 5,000
- File Vault: encrypted cloud storage up to 5 GB with presigned URLs
- OAuth2 M2M authentication
- Available on AWS Marketplace
Customer Vault
A secure web application for managing customer data, capturing intake submissions, sharing files, and collecting electronic signatures.
- Branded public intake forms, no customer account needed
- Customer profile management with cards, files, and signatures
- Staff inbox workflow for reviewing and assigning submissions
- Secure file sharing with expiring links and password protection
- WebAuthn passkeys and TOTP MFA enforcement
Enterprise-Grade Protection
Both products are built with defense in depth. Every layer is designed around zero-trust principles.
AES-256 Encryption
All data encrypted at rest using AES-256-CBC with unique per-field initialization vectors. Files use AES-GCM with envelope encryption.
Compliance
PCI DSS Level 1 certified and SOC 2 Type II audited. Reduce your own audit scope by offloading sensitive data to us.
Managed Key Infrastructure
Encryption keys managed through a dedicated key management service. Customer-isolated key hierarchies with automatic rotation.
Passwordless MFA
Customer Vault enforces WebAuthn passkeys and TOTP multi-factor authentication. No passwords to steal, no phishing to worry about.
Multi-Tenant Isolation
Per-tenant data partitioning, IP whitelist validation, isolated authentication, and dedicated encryption keys per customer.
Audit Logging
Every API request logged with client ID, IP, and response status. Customer Vault tracks all user activity through centralized audit trails.
API-First. Works with Any Stack.
A clean REST API with OpenAPI documentation and OAuth2 authentication. Integrate encryption and tokenization in minutes from any language or platform.
# Authenticate TOKEN=$(curl -s -X POST \ https://api-auth.enigmavault.io/oauth2/token \ -d "grant_type=client_credentials" \ -d "scope=io.enigmavault/datavault" \ | jq -r .access_token) # Store a secret in the Data Vault curl -X POST \ https://api.enigmavault.io/datavault/secrets \ -H "Authorization: Bearer $TOKEN" \ -H "Content-Type: application/json" \ -d '[{"plaintext":"SSN-123-45-6789"}]' # Response: [{"token":"a1b2c3...","customIdentifier":null}]
Let's Talk Security
Have questions about Enigma Vault, need a custom plan, or want to see a live demo? Fill out the form and our team will get back to you within one business day.
- (877) 977-2083
-
30 Broad St., Suite 14114
New York, NY 10004