New

Browser Tokens

Let your AI agents pay anywhere, without ever seeing card data

Evervault logo

Build, deploy, and scale secure enclaves

Quickly deploy Docker containers in a secure enclave, powered by AWS Nitro Enclaves. Enclaves offer easy deployment, invocation, and attestation of secure enclaves without the engineering overhead.

ClientClientSecure EnclaveSecure EnclaveCode changed

Enterprise-grade security for sensitive workloads

A secure enclave is a highly constrained compute environment that allows you to prove that the code you’ve written is the code you’re running. It has no persistent storage, no shell access, and no networking by default.

Playground
1await evervault.enableEnclaves({
2 'my-enclave': [{ PCR8: "..." }]
3});
4const { data } = await axios.post('https://my-enclave.uuid.evervault.com', {
5 encryptedPayload
6});
7console.log(data);

Get started

Deploy and attest your first secure enclave using three commands from the Evervault CLI.

Step 1

Build

Use the Enclaves CLI to convert a Docker image to an enclave image — locally, or in your CI/CD pipeline.

~ ev-enclave build -f ./Dockerfile .

Step 2

Deploy

Upload your enclave image to Evervault, and we’ll provision and scale your enclave automatically.

~ ev-enclave deploy .

Step 3

Attest

Attest and request your application using the Evervault SDK — so you can verify the code you wrote is the code you’re running.

~ curl https://my-enclave.uuid.evervault.com

Trusted from the ground up

Open source

Security by obscurity doesn’t cut it. Enclaves are auditable and transparent by default, and run without any proprietary agents, runtimes, or libraries.

Effortless deployments with provable security

Run sensitive workloads in completely separate environments with heavily restricted external access.

Attest code integrity

Verify that the code you’re running is the code you wrote and signed, guaranteed by cryptographic attestation.

Full isolation

Isolate sensitive workloads from the internet, and verify that sensitive data never leaves your enclave.

Lift and shift

Deploy any existing Docker container into a secure enclave.

Hosted and managed by Evervault

Evervault manages and scales instances on your behalf. Eliminate the DevOps headache of deploying and scaling secure enclaves.

Elastic scaling

Configure the size and number of instances running your enclave on demand.

Fully compliant

Enclaves are fully compliant with standards like PCI DSS, HIPAA, and GDPR.

Adapt Enclaves for any security workflow

Enclaves can be adapted to any existing workflow that requires heightened security.

Cryptographic key management
Secure data sharing
Multi-party computation
UserPerform Key OperationsEnclaveServer

Adapt Enclaves for any security workflow

Enclaves can be adapted to any existing workflow that requires heightened security.

Cryptographic key management
Secure data sharing
Multi-party computation
UserPerform Key OperationsEnclaveServer

Compatible with each Evervault Primitive

Primitives are building blocks for developers. They're fundamental, interoperable products for constructing any data security or compliance workflow.

Meet compliance requirements. Build customer trust.

Use Evervault’s flexible building blocks to keep your customers’ data secure and compliant at all times.

Evervault logo mark
Evervault logo mark

Subscribe to our newsletter

Sign up to get access to the latest product insights.

© 2026 Evervault Inc. All rights reserved.