Fortanix Data Security Manager (DSM) is the first cloud service built using the Intel® SGX technology. This enables Fortanix DSM to provide HSM-grade security in software. Fortanix DSM is distributed software, written to scale on-demand, and is built to be fault-tolerant and highly available. AWS KMS and Azure Key Vault rely on HSMs to derive primary keys, but the cryptographic operations are done outside the trust boundary of an HSM. In Fortanix DSM, all cryptographic and key management operations are done inside the trust boundary of an Intel® SGX enclave.