ollivanders.co.uk

What It Is

Evervault is a developer-focused security and compliance infrastructure platform designed to address encryption, decryption, processing, and compliance exposure for sensitive data across applications, APIs, and payment flows. Its documentation shows that the core entry point is a REST API: all requests must be made over HTTPS and authenticated with Basic Auth using an App ID and API Key.

Core Capabilities

In terms of protection methods, Evervault provides encryption and decryption APIs for JSON objects and files, and also supports Inspect: viewing the type, encryption time, data role, fingerprint, and bank card metadata of encrypted values without accessing the plaintext. Relay is a key capability. It can be deployed as a network proxy in front of a target domain to encrypt or decrypt headers, JSONPath values, and form fields in requests or responses, making it suitable for protecting first-party or third-party APIs with minimal code changes. Functions lets developers process encrypted data in a secure serverless environment using Node.js or Python, preventing plaintext from landing in their own infrastructure.

Compliance, Management, and Integrations

On the compliance side, the navigation includes PCI Compliance, HIPAA, GDPR, ASV Scans, and related items. However, the main documentation does not disclose specific certification reports or levels, so it can only be concluded that Evervault covers relevant compliance scenarios, not that any particular certification status is confirmed. Management features include API Keys, Logs, Observability, Data Policies, Webhooks, Sandbox Apps, and Dashboard. Its integration capabilities are relatively strong, with REST API, SDKs, OpenAPI spec, custom domains, SAML, and Webhooks. On the payments side, it also includes capabilities such as Cards, 3D Secure, Network Tokens, Card Account Updater, and BIN Lookup.

Pricing, Pros, and Cons

The captured content does not provide pricing models, plans, free quotas, or payment methods, so additional inquiry is needed before procurement. Its strengths are clear API specifications, granular field-level control, and good fit for embedding into an existing technology stack; Relay and Functions can also reduce the surface area where plaintext is handled. The drawbacks are that the learning curve is developer-oriented and it is not an out-of-the-box security platform; information on alerts, SLA, support response times, and data residency is also insufficient.

Best Fit and Access from China

Evervault is suitable for SaaS, fintech, e-commerce, and API-driven teams that handle payment cards, personal information, or other sensitive data, especially developer organizations looking to reduce the compliance burden around PCI/HIPAA/GDPR. Access from mainland China is not described in the documentation, so its status is unknown; cross-border networking, foreign-currency payments, compliance filings, and data export requirements should be verified separately. For local alternatives, consider Alibaba Cloud KMS, Tencent Cloud KMS, Huawei Cloud KMS, or similar solutions such as TokenEx, Skyflow, and HashiCorp Vault.