Hyperswitch Card Vault

Visit site Alternatives

Score6.8

Rank#2 of 22

PriceFree

Free planYes

Runs onAPI, Linux, Self-hosted

Summary

Hyperswitch Card Vault is ranked #2 of 22 in payment tokenization software on Everything Xiaomi. It runs on API, Linux, Self-hosted. There is a free plan.

Hyperswitch Card Vault plans and pricing

All plans

Self-Host Community Edition Free Self-hosted; manage compliance end to end; 90+ payment integrations; community support hyperswitch.io · 4 Oct 2026

Integrate Hyperswitch Cloud Not published Managed hosting; 210+ payment integrations; SLA-driven support; dedicated account manager hyperswitch.io · 4 Oct 2026

Self-Host Enterprise Edition Not published Self-hosted; 90+ payment integrations; SLA-driven support; dedicated account manager hyperswitch.io · 4 Oct 2026

Compared on payment tokenization software

Network tokenization: Yesgithub.com
Token vault hosting: bothgithub.com
Detokenization API: Yesgithub.com
Payment methods: cards; bank account detailsgithub.com
Deployment model: self_hostedgithub.com

Facts

Purpose: Hyperswitch Card Vault stores card and other payment method details securely in a PCI-compliant manner away from the main application server.github.com · 3 Oct 2026
Standalone service: Hyperswitch describes its Vault Service as a standalone service for tokenizing and securing customer card data without requiring its payment solutions.github.com · 3 Oct 2026
Vaulting and forwarding: The Vault and Forward API can tokenize and store card details, then route that data to supported processors or endpoints.hyperswitch.io · 3 Oct 2026
Tokenization: The product page describes storing network and processor tokens, raw card details, bank credentials, and wallet credentials.hyperswitch.io · 3 Oct 2026
Integration options: The vault can be integrated through an SDK for merchants that are not PCI compliant or directly server to server for PCI-compliant merchants.hyperswitch.io · 3 Oct 2026
Deployment: The vault page says it can be deployed by customers on-premises or in the cloud, or used as a managed service hosted by Juspay.hyperswitch.io · 3 Oct 2026
Security features: The setup guide describes optional key custodian protection, JWE and JWS encryption middleware, and AWS KMS encryption for keys and sensitive data passed during startup.github.com · 3 Oct 2026
Data protection: Hyperswitch documents signing card data before transmission, encrypting it to the vault, re-encrypting it with AES for storage, and encrypting the database at rest.github.com · 3 Oct 2026
Processor coverage: The product page states that tokenization is available through 50+ processors and references network tokens across Visa, Mastercard, and Amex.hyperswitch.io · 3 Oct 2026
Performance claims: The product page lists 99.999% uptime, response time under 50 ms, and throughput of 20k+ transactions per second.hyperswitch.io · 3 Oct 2026
Self-hosting setup: The setup guide documents running the locker in Docker or directly as a Cargo executable, with a database and configuration required.github.com · 3 Oct 2026
Flexible data: The vault is designed to store different types of sensitive information and supports APIs on the /data and /cards endpoints.github.com · 4 Oct 2026
Tokenized proxy payments: Its proxy payment service can replace vault tokens with card data and forward payment requests to a PSP.github.com · 4 Oct 2026
Processor connections: Proxy payments are described as working with existing PSP connections without requiring PSP reintegration.github.com · 4 Oct 2026
Communication security: The setup guide describes JWE encryption and JWS signing middleware for communications between tenant applications and the vault.github.com · 4 Oct 2026
Key custody: The optional key custodian feature requires two keys to decrypt the master key before vault functions can run.github.com · 4 Oct 2026
AWS KMS: The setup guide describes an AWS-specific KMS feature that adds encryption for keys and sensitive data passed to the vault during startup.github.com · 4 Oct 2026
Encryption at rest: Hyperswitch documentation says card data is re-encrypted internally with AES and the database is encrypted at rest.github.com · 4 Oct 2026
PCI scope: The proxy payment flow is described as reducing PCI DSS scope by keeping raw card data within the vault.github.com · 4 Oct 2026
Storage association: The repository overview says cards are stored against the combination of merchant and customer identifiers.github.com · 4 Oct 2026
Duplicate prevention: The repository overview says internal hashing checks are used to avoid data duplication.github.com · 4 Oct 2026
Deployment and audience: The setup guide documents running the vault in Docker or running the executable with Cargo, for teams configuring and operating their own service.github.com · 4 Oct 2026
Community support: The pricing page lists free support through the public Slack channel and GitHub discussions for the Community Edition.hyperswitch.io · 4 Oct 2026