evervault.com

What It Is

Evervault is a security and compliance platform for sensitive payment data. Its core role is not to handle acquiring and settlement on behalf of merchants, but to help businesses securely collect, encrypt, process, and forward card data, reduce PCI DSS scope, and support multi-processor payment architectures. Example customers include Ramp, Modern Treasury, and Rippling, with positioning geared toward developers and fintech infrastructure teams.

Core Capabilities

In terms of service coverage, Evervault includes encryption, card tokenization, 3D Secure, Network Tokens, BIN Lookup, card insights, Relay proxying, Functions, and Enclaves for secure computation. Its dual-custody model is a notable feature: Evervault stores the keys, while customers store the encrypted data themselves. The platform states that it does not store customer data, reducing the risk of a single point of compromise. For payment methods, the available materials explicitly mention cards, Apple Pay, Google Pay, 3D Secure, and network tokens, but do not disclose support for local payment methods or bank transfers.

Pricing and Compliance

Pricing is usage-based with custom enterprise plans: decryption is $0.005 per request, successful 3DS authentication is $0.03 per request, Network Token creation, cryptograms, and updates are each $0.03, Apple Pay/Google Pay is $0.01 per transaction, BIN lookup is $0.005 per request, and verification services are $0.15-$0.25 per request. Enclaves, dedicated support, and related services require contacting sales. On compliance, Evervault discloses SOC 2 Type II, PCI DSS 4.0.1 Level One, CSA STAR Level One, EMVCo 3D Secure, GDPR, and HIPAA, all of which are important for payment security use cases.

Pros, Cons, and Best Fit

Its strengths are developer-friendly APIs/SDKs, the ability to connect with multiple gateways and issuers, and suitability for teams building payment routing, card sharing, card-issuing products, card insights, and wallet key management. Tokens can be generated locally through encryption, which can help reduce latency. The drawbacks are that it does not provide clear information on acquiring, settlement timelines, or country coverage. Basic support is limited to weekdays from 9:00-17:00 GMT, so mission-critical production systems may require enterprise support.

Access from China and Alternatives

Network accessibility from mainland China is not disclosed, so it should be considered unknown. On the payment side, Evervault also does not state whether it supports Chinese local wallets or domestic acquiring. If you need full payment processing, consider Stripe, Adyen, or Checkout.com. If your focus is a payment data vault and tokenization, compare it with Spreedly, Basis Theory, and Very Good Security.