Vault
Hyperswitch offers flexible vault deployment options to suit different merchant PCI profiles and hosting preferences. Whether you’re self-hosting Hyperswitch with your own PCI setup or leveraging the fully managed SaaS orchestration layer, Hyperswitch’s modular vault architecture adapts seamlessly to your compliance boundary.\ \ This section outlines the various Vault Flavors supported by Hyperswitch - covering self-hosted and SaaS environments, in-house and outsourced PCI models, and integrations with Juspay-hosted or third-party vaults such as VGS and Tokenex. Each model includes sequence diagrams, supported feature sets, and references to relevant configuration guides.
Vault Architecture & Deployment Models
| Merchant Profile | Hosting Type | Vault Option | PCI Responsibility | Example Use Case |
|---|---|---|---|---|
| Merchant Profile | Hosting Type | Vault Option | PCI Responsibility | Example Use Case |
| SaaS orchestration + Juspay vault | Juspay hosts Hyperswitch orchestration | Juspay hosted vault | PCI handled by Juspay | Enterprise or mid-scale merchants using Hyperswitch SaaS |
| SaaS orchestration + third-party vault | Juspay hosts Hyperswitch orchestration | Third-party vault or vault + SDK | PCI shared with external vault provider | Merchants already invested in external token vaults |
| Self-hosted & in-house PCI | Merchant hosts Hyperswitch orchestration | Native vault within self deployed Hyperswitch | Merchant manages PCI DSS compliance | Large enterprise merchants with full PCI scope |
| Self-hosted & outsourced PCI (similar to SaaS with 3rd party vault) | Merchant hosts Hyperswitch orchestration | Juspay hosted vault + SDK or third-party vault + SDK (VGS, Tokenex) | PCI outsourced to third-party provider | Merchants who want control over orchestration but offload PCI |
| Vaulting & outsourced PCI | - | Juspay hosted vault + SDK | PCI handled by Juspay | Merchants looking for unified token vault with Proxy API |
Modular vaulting in Hyperswitch
Modular Vaulting is a key component of Juspay’s payment system, offering merchants the flexibility to either use Hyperswitch’s built-in PCI-compliant vault with advanced tokenization and security features or connect to any third party vault provider. This flexibility enables businesses to start simple and scale confidently without re-architecting their entire system.
