PAYS HSM
Providing Payment HSMs as a Service, PAYS HSM allows business owners from anywhere around the world to access the full capabilities of Payment HSMs cryptography without the hassle of owning and operating HSMs themselves.



How it works
How it works
PAYS HSM innovative customer-centric service enables customers to globally access the world’s leading Payment HSMs – fifth generation Thales payShield 10K in data centres hosted by security experts, simplifying payment ecosystem in business operation.
Connected securely to fully managed Payment HSMs from wide range of payment applications, be it on premises or cloud-based, for a suite of payment security functionality such as transaction processing, sensitive data protection, payment credential issuing, mobile card acceptance as well as payment tokenization.
With its high performance payShield 10K HSMs operating at high availability, unplanned business downtime can be reduced, and resilience maximised. This allows PAYS HSM to deliver a world-class experience to end-users.
Range Of Functions

Payment Credential Issuing
Cards, mobile secure elements, wearables, connected devices and host card emulation (HCE) applications.

PIN Routing

Point-to-point Encryption
(P2PE)

Security Tokenization
(for PCI DSS compliance)

EMV Payment Tokenization

Card and Mobile Payment Authorisation

POS, mPOS, and SPoC Key Management

PIN and EMV Cryptogram Validation

Remote Key Loading
Service Overview

PAYS HSM Services
Service | Shared | Dedicated |
---|---|---|
Test – Provide test systems to execute multiple test cases with PCI requirements | – Group of HSMs shared with multiple users – Secure data segregation with unique LMK per customer – Economical solution with excellent price-performance ratio | -Exclusive group of HSMs carry only own keys and data – Have full control/custody to own specific configurations – High volume transactions without performance reduction |
Benefits For The Users

Reduce Ownership Cost and Deployment Effort
Integrates seamlessly with numerous existing payment instruments and applications, hence more resources can be spent growing the business.

Multi-cloud
Works seamlessly with both public and private cloud providers, enabling you to maximise your business adaptability and flexibility.

Fully Compliant to Security Standards
PayShield 10K HSM is certified against all major global and regional security standards - we help fast track your audit compliance such as PCI DSS.

Highly Skilled Support
24/7 high visibility monitoring and immediate assistance by our experienced and certified technical team.

Disaster Recovery
PayShield 10K HSMs promise stable network connectivity with no downtime and unplanned outages.

Automated Updates
So you can stay up to date with new features through the latest hardware, firmware, and security releases.

Globally Connected
Reach to PAYS service anytime, anywhere without compromising safety through encrypted connections.

Complete Data Isolation
Privacy and data protection are always guaranteed with best security standard practices.