EncryptRIGHT and u.trust General Purpose Hardware Security Module integration simplifies application-level data protection and PCI DSS compliance

September 8, 2026 – Utimaco and Prime Factors today announced the integration of EncryptRIGHT with the u.trust General Purpose HSM, a joint solution built to help organizations protect data at the application layer while reducing development costs and future-proofing their data security against evolving PCI DSS and other regulatory requirements.

The integration brings together the Prime Factors data security platform, EncryptRIGHT, a solution that abstracts data protection from applications, and Utimaco’s u.trust General Purpose HSM Se-Series, a FIPS-certified hardware root of trust. The result is a high-assurance, crypto-agile architecture that enables robust data protection at the application layer and seamless security updates without requiring application rework.

“Organizations today face mounting pressure to stay ahead of cryptographic standards while keeping development teams focused on delivering value,” said Juan Asenjo, Director of Product Management at Prime Factors. “EncryptRIGHT centralizes security policy management and distributes its enforcement, streamlining implementation. This allows for quick and easy security changes to adapt to evolving risks and regulatory requirements. EncryptRIGHT and u.trust General Purpose HSM gives security and engineering teams a straightforward path to PCI DSS compliance without the complexity and cost typically associated with cryptographic upgrades.”

A Powerful Combination of Data Security Abstraction and Hardware Root of Trust

While EncryptRIGHT simplifies application-level protection through policy-driven abstraction, the u.trust General Purpose HSM provides trusted hardware for secure key custody. Together, the solution delivers robust data protection to help meet PCI DSS mandates, including the standard’s best-practice recommendation for crypto-agility.

“Together, we’re enabling organizations to reduce the burden of implementing and managing data protection by combining our certified hardware security module with Prime Factors’ simplified, application-level controls,” Manish Upasani, Head of Product Management at Utimaco, said. “This collaboration delivers a robust, crypto-agile security architecture giving teams the ability to quickly adapt to evolving requirements – reducing cost and risk while allowing teams to focus more on high-value initiatives.”

Key benefits of the joint solution include:

• Reduced Costs & Development Complexity – Robust data security at the application layer using a variety of data protection techniques including encryption, tokenization, data masking and redaction, and granular access controls without requiring cryptographic expertise.
• Simplified PCI DSS Compliance – Reduced audit scope for PCI DSS requirements through policy-driven data protection and crypto-agility.
• Seamless Security Changes – Centralized control and distributed enforcement enable rapid, centrally managed changes across applications without code rework.
• Certified Hardware Protection – A FIPS-validated root of trust protects cryptographic keys within a security boundary.
• Reduced Insider Threats – Granular access controls and separations of duty ensure only the right users have access to the right data as defined in a policy.

Utimaco u.trust General Purpose HSM now integrates with EncryptRIGHT, providing a crypto-agile architecture with hardware-backed key protection . To learn more about the integrated solution visit https://www.primefactors.com/data-protection/encryptright/ or utimaco.com/gp-hsm.