Eviden's External Key Storage for AWS (XKS) is a cybersecurity solution designed to help organizations maintain control over their encryption keys when using AWS services. This service allows customers to store and manage their encryption keys in a secure hardware security module (HSM) outside of AWS, ensuring compliance with stringent data privacy regulations.

Key Features

• Hardware Security Module (HSM): Keys are stored in Eviden's Trustway Proteccio™ HSM, which is certified by the French national cybersecurity agency (ANSSI QR) and Common Criteria EAL4+.
• End-to-End Management: Eviden handles setup, management, and maintenance of the HSM, including software, hardware, and networking.
• Integration with AWS Services: Supports over 100 AWS services like Amazon S3 and AWS Lambda.
• Envelope Encryption: Data encryption keys are doubly encrypted, first by AWS KMS and then by the external key in the HSM.
• xKMgr for Key Lifecycle Management: Manages HSM keys through a REST API for easy DevOps integration.

Benefits

• Enhanced Data Sovereignty: Customers retain full control over their encryption keys.
• Compliance with Regulations: Meets GDPR and eIDAS requirements.
• Reduced Costs: Eviden manages infrastructure, reducing operational costs.
• High Security Standards: Uses tamper-proof HSMs for secure key storage.