Liminal Prime is Live ! Built for exchanges, OTC desks, and cross-border stablecoin businesses. Explore Liminal Prime
Request Demo
EN ⏷
TW
Request Demo
EN ⏷
TW
Request Demo
Request Demo
EN ⏷
TW
Request Demo
EN ⏷
TW

HSM Vault

Secure HSM Vault for Cryptographic Key Management

Liminal HSM Vault provides complete offline protection and policy-based control for digital assets. Built with Securosys HSM, it ensures private keys never go online while maintaining full regulatory compliance.
Request Demo

Core Challenges of Institutional Custody

Traditional custody systems were not built for the complexity, compliance, and control institutions need today. Institutions managing digital assets face critical risks:

  • Parts of the workflow go online during signing, creating exposure to Private keys.
  • Software-based approvals add friction without real security benefits.
  • Security layers without compliance make audits and reporting difficult.
  • Staff changes often require full system resets, introducing vulnerabilities.

True Offline Security
with Complete Control

HSM Vault enables institutional grade cold storage through a hybrid HSM and MPC architecture.

  • Private keys stay completely offline throughout the signing process.
  • Cryptographic authorisation trumps software and manual approvals.
  • Integrated KYT and Travel Rule checks ensure every transaction meets regulatory standards.
  • Live operations, always: update authorisers & policies without hampering business continuity
See how it works

End-to-End Authentication with Zero Key Exposure

Every transaction passes through multiple layers of authentication and validation, all while keeping the private key offline.
  • Compliance Check - Each transaction is verified against KYT and Travel Rule policies through integrations with partners like Notabene and TRM Labs.
  • Authoriser Quorum - A defined quorum authorises the transaction, and a cryptographic proof (TAP 1) is generated.
  • Transaction Operation - The operator validates policy adherence and transaction details. TAP 2 is added automatically.
  • Offline Operator Approval - The payload moves to an isolated offline system. The operator reviews and adds TAP 3.
  • Transaction Signing via HSM - The custody manager validates and authorises transaction details providing TAP4. HSM verifies the combined TAP and signs the transaction
  • Transaction Broadcast - The verified payload is sent back online for blockchain broadcast and confirmation tracking.

HSM Vault Process Flow

Throughout the process, private keys remain inaccessible, ensuring absolute cold security.

Trusted Infrastructure for Institutional Security

Liminal HSM Vault unites Liminal’s cryptographic innovation with Securosys’ trusted hardware to deliver uncompromised, enterprise-grade security.

Layer 1:
Securosys HSM: The Hardware Core

Patented SKA Technology: Ensures only cryptographically authorized keys can sign transactions.
Policy-Driven Control: Prevents misuse or signing outside defined rules.
Enterprise Reliability: Purpose-built for financial institutions and custody-grade environments.

Layer 2:
Liminal: The Intelligence Layer

Cryptography-Based Approvals: Replaces fragile manual or UI approvals with verifiable proofs.
Compliance Integrated by Design: Seamlessly connects with KYT and Travel Rule providers for regulated operations.
Granular Access Control: Manage devices, roles, and permissions with detailed audit trails.
Zero Key Exposure: Private keys remain completely offline throughout every stage.

Seamless Institutional Integration

Liminal HSM Vault is designed for easy integration with existing systems, requiring minimal resources to deploy and onboard.
Deploy on-premise, co-located, or through regulated partners.
Compatible with leading custody and exchange systems.
Includes full lifecycle support for key rotation, audit logging, and policy updates.
Built to align with global regulatory standards like VARA, MAS, and FSC.
Talk to a Specialist