LAAVAT PKI and Signing Platform

Spec sheet

Integrations

Integrations include REST, EST, Microsoft Entra ID, Google SSO, Yocto, CI/CD clients and provisioning-station clients.Read 1 Oct 2026 · laavat.io

Compliance

LAAVAT’s information security management system is certified to ISO/IEC 27001:2022, certificate 244147.Read 1 Oct 2026 · docs.laavat.io

Support

The documentation directs users to contact [email protected] for unanswered questions.Read 1 Oct 2026 · docs.laavat.io

Headquarters

Tampere, FinlandRead 28 Sep 2026 · laavat.io

CRA scope limit

LAAVAT states that using the platform alone does not make a product CRA compliant because compliance also covers the whole product and process.Read 1 Oct 2026 · docs.laavat.io

Deployment models

Customers can use a shared HSM, a dedicated LAAVAT-managed HSM, a customer-managed HSM in their AWS account, or on-premises deployment.Read 1 Oct 2026 · docs.laavat.io

Device security

LAAVAT provides secure boot, signed firmware updates and tamper-resistant per-device certificates for mutual TLS, attestation and factory onboarding.Read 1 Oct 2026 · laavat.io

Encryption

It supports AES-GCM-256 image encryption, manufacturing key delivery, key escrow and key export.Read 1 Oct 2026 · laavat.io

Governance

The platform offers RBAC, group-based signing policies, quorum approvals and immutable exportable audit trails.Read 1 Oct 2026 · laavat.io

Key protection

Signing keys are generated inside AWS CloudHSM and never exist in plaintext outside the HSM.Read 1 Oct 2026 · docs.laavat.io

Managed service

It runs customers’ PKI, signs firmware and issues device identities as a managed service.Read 1 Oct 2026 · laavat.io

PKI capabilities

The platform provides CA hierarchies, certificate lifecycle management, EST and REST enrollment, and CRL lifecycle functions.Read 1 Oct 2026 · laavat.io

Product purpose

LAAVAT is a cloud PKI and code-signing platform for embedded and IoT device manufacturers.Read 1 Oct 2026 · docs.laavat.io

Signing formats

Supported signing targets include NXP HAB/AHAB, AMD/Xilinx Bootgen, TI, MCUboot, FIT, RAUC, SWUpdate, Mender, OP-TEE, OCI/Cosign, Windows, Java, JWT and detached signatures.Read 1 Oct 2026 · laavat.io

Target users

The platform is aimed at engineering, security, product and manufacturing teams building connected devices and managing firmware signing across pipelines and production lines.Read 1 Oct 2026 · laavat.io

Plans and prices

Every LAAVAT PKI and Signing Platform plan and price →

Where Specifiction places it

• Code Signing Software#14 of 287.6