Core0 review
A self-hosted vault for keeping PII out of application databases, with paid plans from £349 per month.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Core0 is a self-hosted PII tokenization vault for organizations that want personal data to remain inside their own infrastructure. It sits between an application and its database: the application stores tokens, while Core0 retains encrypted personal information. Its REST API supports storing, retrieving, batching, anonymizing, exporting and erasing records. That makes it a fit for small teams through enterprise organizations that need tokenized records and control over deployment, rather than a hosted service or a general-purpose data protection suite.
The published plans show Starter at £349 per month or £3,490 per year, with PII tokenization, file storage and email support. Pro costs £799 per month or £7,990 per year and adds API access and priority support. Enterprise costs £2,490 per month or £24,900 per year, adding dedicated support and a custom SLA alongside API access. Prices exclude VAT. Because API access starts with Pro, buyers who need applications to integrate through the API should compare the higher tiers; Starter is the lower-cost option for its listed tokenization and file storage features.
Core0’s notable depth is in handling records after tokenization: it supports batch storage, in-place anonymization, machine-readable CSV exports, and retrieval or erasure by token. Field-level encryption, mTLS for service-to-service calls, and tamper-evident logs recording API actor, tenant, operation and latency add controls around that workflow. It also lists GDPR. The trade-off is a self-hosted deployment, so teams seeking a managed hosted service should look elsewhere. Core0 is most relevant to organizations prepared to operate a self-hosted vault and pay for API access when needed.
Core0 pros and cons
- Where it wins
- Issues tokens while retaining encrypted PII in your infrastructure
- Supports batch storage, in-place anonymization, retrieval and erasure
- Tamper-evident API audit records plus field-level encryption and mTLS
- Where it doesn't
- Starter plans do not include API access
- Requires self-hosted deployment and node-based licensing
- No free plan is currently available
Core0 fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update