3 days ago
34
Three companies that rarely share a stage are joining forces in a corner of fintech that most people never think about but everyone depends on: the cryptographic plumbing that keeps payment transactions secure.
Microsoft, Marvell, and UTIMACO are collaborating on a secure, cloud-scale payments solution built around hardware security modules, the specialized chips that guard encryption keys, process PINs, and ensure that trillions of dollars in card transactions don’t get intercepted by bad actors.
What each company brings to the table
Marvell contributes its LiquidSecurity HSMs, which are FIPS 140-3 Level 3 certified. These PCIe-based accelerators are designed for serious throughput: they support over one million keys and more than one million cryptographic operations per second per adapter.
UTIMACO, a German security firm with deep roots in payment cryptography, offers PCI DSS and PCI PIN-compliant hardware security modules. Its MYHSM Payment HSM as a Service product is already listed on the Microsoft Azure marketplace. UTIMACO also maintains a partnership with IBM Cloud for Financial Services, where it delivers native Payment HSM-as-a-Service with 99.999% availability and ultra-low latency.
Microsoft provides the hyperscale cloud environment. Azure already offers its own Payment HSM service, a bare-metal deployment based on Thales payShield 10K hardware that runs inside customer virtual networks for PCI-compliant operations.
Why payments need cloud-native security
For decades, financial institutions have relied on on-premises HSMs, physical boxes bolted into secure server rooms that handle everything from generating encryption keys to validating cardholder PINs. The problem is that those boxes are expensive, hard to scale, and require specialized staff to manage. When transaction volumes spike, adding capacity means ordering new hardware, waiting for delivery, and physically installing it.
This shift also carries financial implications for the institutions making it. Moving from capital-intensive on-premises HSM deployments to an as-a-service model reduces total cost of ownership. Instead of six-figure hardware purchases and ongoing maintenance contracts, payment providers pay for what they use.
A growing market with real momentum
The HSM-as-a-service market is projected to grow at a compound annual growth rate of 8.5%, driven largely by financial services firms seeking operational flexibility and cloud scalability.
This collaboration also fits a pattern of consolidation in cloud security for financial services. Marvell handles the silicon-level performance optimization. UTIMACO handles payment-specific compliance and key management. Microsoft handles the cloud platform and go-to-market distribution through Azure Marketplace. For the competitive landscape, this three-way effort positions the group against other cloud payment security offerings. AWS has its own CloudHSM service, and Google Cloud partners with various HSM vendors for key management. Thales, whose hardware already powers Microsoft’s existing Azure Payment HSM service, remains a major standalone player.
Disclosure: This article was edited by Editorial Team. For more information on how we create and review content, see our Editorial Policy.
English (US) ·