Skip to content
SPECIFICTION
Get listed

Hyperswitch Card Vault

github.com

Free plan LinuxAPISelf-hosted
Visit github.com
Spec score 8.6 #4 of 22 in Payment Tokenization Software

Spec sheet

Purpose
Hyperswitch Card Vault is an open-source Rust service for securely storing sensitive information such as payment card and bank account details.Read 4 Oct 2026 · github.com
Deployment
The vault page says it can be deployed by customers on-premises or in the cloud, or used as a managed service hosted by Juspay.Read 3 Oct 2026 · hyperswitch.io
AWS KMS
The setup guide describes an AWS-specific KMS feature that adds encryption for keys and sensitive data passed to the vault during startup.Read 4 Oct 2026 · github.com
Communication security
The setup guide describes JWE encryption and JWS signing middleware for communications between tenant applications and the vault.Read 4 Oct 2026 · github.com
Community support
The pricing page lists free support through the public Slack channel and GitHub discussions for the Community Edition.Read 4 Oct 2026 · hyperswitch.io
Data protection
Hyperswitch documents signing card data before transmission, encrypting it to the vault, re-encrypting it with AES for storage, and encrypting the database at rest.Read 3 Oct 2026 · github.com
Deployment and audience
The setup guide documents running the vault in Docker or running the executable with Cargo, for teams configuring and operating their own service.Read 4 Oct 2026 · github.com
Duplicate prevention
The repository overview says internal hashing checks are used to avoid data duplication.Read 4 Oct 2026 · github.com
Encryption at rest
Hyperswitch documentation says card data is re-encrypted internally with AES and the database is encrypted at rest.Read 4 Oct 2026 · github.com
Flexible data
The vault is designed to store different types of sensitive information and supports APIs on the /data and /cards endpoints.Read 4 Oct 2026 · github.com
Integration options
The vault can be integrated through an SDK for merchants that are not PCI compliant or directly server to server for PCI-compliant merchants.Read 3 Oct 2026 · hyperswitch.io
Key custody
The optional key custodian feature requires two keys to decrypt the master key before vault functions can run.Read 4 Oct 2026 · github.com
Maker headquarters
Juspay says it is headquartered in Bangalore.Read 3 Oct 2026 · juspay.io
PCI scope
The proxy payment flow is described as reducing PCI DSS scope by keeping raw card data within the vault.Read 4 Oct 2026 · github.com
Performance claims
The product page lists 99.999% uptime, response time under 50 ms, and throughput of 20k+ transactions per second.Read 3 Oct 2026 · hyperswitch.io
Processor connections
Proxy payments are described as working with existing PSP connections without requiring PSP reintegration.Read 4 Oct 2026 · github.com
Processor coverage
The product page states that tokenization is available through 50+ processors and references network tokens across Visa, Mastercard, and Amex.Read 3 Oct 2026 · hyperswitch.io
Security features
The setup guide describes optional key custodian protection, JWE and JWS encryption middleware, and AWS KMS encryption for keys and sensitive data passed during startup.Read 3 Oct 2026 · github.com
Self-hosting setup
The setup guide documents running the locker in Docker or directly as a Cargo executable, with a database and configuration required.Read 3 Oct 2026 · github.com
Standalone service
Hyperswitch describes its Vault Service as a standalone service for tokenizing and securing customer card data without requiring its payment solutions.Read 3 Oct 2026 · github.com
Storage association
The repository overview says cards are stored against the combination of merchant and customer identifiers.Read 4 Oct 2026 · github.com
Tokenization
The product page describes storing network and processor tokens, raw card details, bank credentials, and wallet credentials.Read 3 Oct 2026 · hyperswitch.io
Tokenized proxy payments
Its proxy payment service can replace vault tokens with card data and forward payment requests to a PSP.Read 4 Oct 2026 · github.com
Vaulting and forwarding
The Vault and Forward API can tokenize and store card details, then route that data to supported processors or endpoints.Read 3 Oct 2026 · hyperswitch.io

Plans and prices

Self-Host Community Edition Free Self-hosted; manage compliance end to end; 90+ payment integrations; community support Read 4 Oct 2026 · hyperswitch.io
Integrate Hyperswitch Cloud Priced on request Managed hosting; 210+ payment integrations; SLA-driven support; dedicated account manager Read 4 Oct 2026 · hyperswitch.io
Self-Host Enterprise Edition Priced on request Self-hosted; 90+ payment integrations; SLA-driven support; dedicated account manager Read 4 Oct 2026 · hyperswitch.io

Every Hyperswitch Card Vault plan and price →

Where Specifiction places it

Alternatives to Hyperswitch Card VaultAll alternatives →