Enterprise On-premise

Get started

Simplify at scale

Protect your operations and value with clarity and industry defining security.

Get started

Secure infrastructure management

Ledger Enterprise handles the infrastructure, API gateways, and node connection. While you stay in full control of your private keys.

Understand transactions instantly

Verify your transaction details before approving them with Ledger’s Clear Signing solution ensuring “What you see is what you sign.”

Your keys,  our network

Master seeds and private keys reside exclusively with your client managed HSMs

Ledger Enterprise

HSM
on-premise

MPC / Software

Based
solutions

Third Party

Provider

Keep your private
keys in-house

Hardware backed
security

Flat fee pricing model

Clear Sign transactions
with secure touchscreens

Use your own
HSM on site

Own the tools you need to succeed

Absolute ownership

Master keys and seeds never leave your data center. They are generated, stored, and utilized exclusively within your managed hardware, ensuring absolute segregation.

Institutional defining security

Meet certified institutional standards. We provide true physical segregation that pure-software solutions cannot match.

Integrate with ease

We resolve the complexities of secure setups, API connectivity, and blockchain nodes, enabling you to launch with confidence and ease.

Full clarity in transactions

Ledger provides your team with hardware-verified transaction clarity, ensuring transparent and verifiable intent before any funds move.

Your choice of HSM

Ledger makes the choice of HSM simple. We connect with new and existing setups to secure your operations quickly.

Built for zero interruptions

Engineered for business continuity. Retaining physical control of your keys includes robust, pre-architected disaster recovery protocols designed for operational continuity.

Join the circle of empowered leaders

Global banks & institutions

Power your institutional custody without the operational friction. Deploy a fully integrated infrastructure that meets the highest regulatory standards right inside your existing perimeter.

Regulated custodians

Support for evolving local compliance mandates. Our models are designed to align with strict regional asset segregation and compliance mandates.

Stablecoin issuers

Take control of your mint and burn operations. Deploy self-hosted infrastructure to scale token issuance securely and help satisfy local residency mandates.

See how Ledger Enterprise transforms your business

Connect with the team to demo the platform, map your requirements, and design a tailored implementation plan that fits your needs.

Secure time now

The security advantage

Access to Ledger Enterprise

Enjoy direct access to the Ledger Enterprise platform. Set up your governance rules. Stake efficiently and securely. Automate operations and leverage compliance tools.

FIPS 140-2 Level 3

Whether you need a high speed solution or customized compliance, Ledger on-premise HSM is fully compatible with enterprise-grade, FIPS 140-2 Level 3 certified Hardware Security Modules, specifically Thales ProtectServer 3 and Luna HSMs.
Thales is a trademark of Thales Group.

EAL6+ Secure Element

Ledger signers (personal security devices - PSD) are powered by a certified EAL6+Secure Element to ensure user authentication and transaction approvals with the highest level of protection.

Physical Isolation

Master seeds and private keys are generated, stored, and used exclusively inside the client's local HSM. The seed never leaves the client's premises and never enters Ledger’s cloud environment.

Secure Channel

When a user approves a transaction, Ledger signers (PSD) create a double-authenticated, fully encrypted tunnel directly to your on-premise HSM, designed to secure the connection path against man-in-the-middle attacks.

Ledger OS™

The external signer (PSD) runs on a battle-tested firmware package: the proprietary Ledger Operating System, managed directly by you and your organization.

Clear Signing

Ledger’s secure signers (PSDs) are equipped with Clear Signing technology. It converts complex smart contract code into instantly understandable language to verify details & avoid costly mistakes.

Frequently Asked
Questions

What is an HSM on-premise ?

An HSM (Hardware Security Module) on-premise is a decoupled architecture where the critical Signer Layer (containing the Master Seed and private keys) is physically located within your own secure data center. This allows institutions to maintain cryptographic sovereignty over their root material while leveraging Ledger’s governance and orchestration infrastructure for operational efficiency.

Does Ledger provide or install the physical hardware?

No. Ledger is a technology provider, not an HSM installer. The client is responsible for procuring compatible hardware (e.g., Thales ProtectServer 3). Physical racking, networking, and maintenance are handled by the client or a third-party System Integrator. Ledger provides the specialized HSM firmware, remote software installation support, and remote attestation to ensure the environment is secure.

How are our private keys created? Does Ledger Enterprise ever see them?

Keys are created through an offline "Master Seed Ceremony" performed directly on your HSM. The seed is generated and split into shards held by your authorized operators. Ledger never sees your keys.

What happens if our hardware breaks or a data center goes offline?

Ledger provides several Disaster Recovery Process (DRP) options. We recommend a Hot or Cold Standby HSM pre-loaded or ready for seed re-injection from your secure shard backups. While the HSM is unreachable, Ledger’s Governance layer queues pending requests. Operations resume once connectivity to the HSM is restored or a secondary-site HSM is activated

Is Ledger Enterprise certified?

Yes. Ledger Enterprise is SOC 2 Type II.

HSM security with absolute control. Institutional security on your terms.

$ Billions

27 %

100+

20%

Why choose Ledger Enterprise?

Simplify at scale

Secure infrastructure management

Understand transactions instantly

Your keys,  our network

Ledger Enterprise

MPC / Software

Third Party

Own the tools you need to succeed

Absolute ownership

Institutional defining security

Integrate with ease

Full clarity in transactions

Your choice of HSM

Built for zero interruptions

Join the circle of empowered leaders

Global banks & institutions

Regulated custodians

Stablecoin issuers

See how Ledger Enterprise transforms your business

Frequently Asked
Questions

What is an HSM on-premise ?

Does Ledger provide or install the physical hardware?

How are our private keys created? Does Ledger Enterprise ever see them?

What happens if our hardware breaks or a data center goes offline?

Is Ledger Enterprise certified?

$ Billions

27 %

100+

20%

Why choose Ledger Enterprise?

Simplify at scale

Secure infrastructure management

Understand transactions instantly

Your keys, our network

Ledger Enterprise

MPC / Software

Third Party

Own the tools you need to succeed

Absolute ownership

Institutional defining security

Integrate with ease

Full clarity in transactions

Your choice of HSM

Built for zero interruptions

Join the circle of empowered leaders

Global banks & institutions

Regulated custodians

Stablecoin issuers

See how Ledger Enterprise transforms your business

Frequently AskedQuestions

What is an HSM on-premise ?

Does Ledger provide or install the physical hardware?

How are our private keys created? Does Ledger Enterprise ever see them?

What happens if our hardware breaks or a data center goes offline?

Is Ledger Enterprise certified?

Your keys,  our network

Frequently Asked
Questions