SAP Data Custodian Key Management Service
SAP Data Custodian Key Management Service: A focused cloud service for SAP-centered key governance, BYOK, HYOK, and audit operations. Ranked #16 of 24 in Encryption Key Management Software by our editors (7.7/10); pricing: Pricing on request; best for SAP enterprise key governance.
At a glance
- Editor score7.7 / 10
- PricingPricing on request
- Best forSAP enterprise key governance
- Free planNo
- Automated key rotationYes
- Facts checked22 Sep 2026
Where it wins
- Supports both BYOK import and HYOK registration
- Connects SAP platforms with external key managers
- Includes rotation, lifecycle controls, and audit-log CSV export
Where it doesn't
- Cloud deployment only
- Pricing requires contacting SAP sales
- Narrower fit than general-purpose key management platforms
Our verdict on SAP Data Custodian Key Management Service
SAP Data Custodian Key Management Service manages customer-managed encryption keys for SAP services and connected cloud environments. It is designed for mid-market and enterprise organizations operating SAP cloud workloads, including SAP BTP, SAP HANA Cloud, SAP Datasphere, and SAP SuccessFactors HCM. The service supports web and API access, with role-based administration, technical users, and API-based provisioning for operational control.
The strongest fit is SAP-centered governance across native and external key environments. Organizations can import keys through Bring Your Own Key (BYOK), register Hold Your Own Key (HYOK) arrangements, and perform native or external key rotation. Key enable, disable, backup, and restore operations support lifecycle administration, while keychain and envelope-encryption relationships address connected encryption workflows. Integrations include AWS Key Management Service, Fortanix DSM, Microsoft Azure Key Vault, and Thales CipherTrust Cloud Key Manager, alongside SAP platforms. This makes the service more suitable for organizations coordinating SAP workloads with existing cloud or external key-management infrastructure than for teams seeking a broad, platform-neutral tool.
Pricing follows a contact-sales model, and the service is provisioned as part of SAP Data Custodian and purchased services rather than presented as a standalone self-service plan. There is no free plan. Audit-log viewing and CSV export provide reporting support, while ticket-based support and documentation cover service assistance. The service should appeal to SAP customers that need BYOK or HYOK, rotation, access administration, and audit operations within a cloud deployment. Organizations seeking general-purpose key management across a wider range of environments may prefer a product with broader platform coverage.
SAP Data Custodian Key Management Service pricing
SAP Data Custodian Key Management Service fact sheet
| Free plan | No |
|---|---|
| Paid from | Not verified |
| Deployment model | Cloud |
| Automated key rotation | Yes |
| HSM support | Not verified |
| External key control | Both |
| Key audit logs | Yes |
| Managed key types | AES, RSA, ECC |
| Deployment | Cloud |
| Platforms | Web |
| Support | Tickets, Docs |
| Built for | Enterprise, Mid-market (editorial estimate) |
| Integrations | 8 integrations: AWS Key Management Service, Fortanix DSM, Microsoft Azure Key Vault, Thales CipherTrust Cloud Key Manager, SAP BTP, SAP HANA Cloud … |
| Pricing | Pricing on request |
| Website | sap.com |
| Facts checked | 22 Sep 2026 |
SAP Data Custodian Key Management Service integrations
SAP Data Custodian Key Management Service lists 8 integrations on its own site.
- AWS Key Management Service
- Fortanix DSM
- Microsoft Azure Key Vault
- Thales CipherTrust Cloud Key Manager
- SAP BTP
- SAP HANA Cloud
- SAP Datasphere
- SAP SuccessFactors HCM
Alternatives to SAP Data Custodian Key Management Service
- Fortanix Data Security ManagerA strong fit for multi-cloud enterprises requiring centralized, HSM-backed key control.9.3
- Thales CipherTrust ManagerBroad lifecycle, cloud, HSM, and audit coverage with a free Community Edition.9.2
- Entrust KeyControlA broad hybrid-cloud key manager for organizations needing governed cryptographic operations.9.1
See all SAP Data Custodian Key Management Service alternatives →
Used SAP Data Custodian Key Management Service? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used SAP Data Custodian Key Management Service for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
SAP Data Custodian Key Management Service is listed in our Encryption Key Management Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/sap-data-custodian-key-management-service/"><img src="https://www.itechguides.com/best/badge/sap-data-custodian-key-management-service.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update