Marvell, Microsoft, and Utimaco Drive Cloud Payment Security Modernization

Key Highlights

• Azure Payment HSM v2 combines Marvell's LiquidSecurity hardware, Utimaco's software, and Microsoft Azure to replace costly, rigid on-premises cryptographic infrastructure with a managed, cloud-scale service.
• The solution directly addresses research showing security and compliance as the top infrastructure barrier by offering a fully managed platform tailored to escalating cyber threats and volume demands.
• The architecture satisfies the nested PCI compliance ecosystem, anchoring broader PCI-DSS requirements to underlying PCI HSM hardware tamper-resistance and PCI PIN cryptographic processing standards.
• Financial institutions retain complete cryptographic key sovereignty and strict regulatory compliance while leveraging elastic cloud economics for real-time transaction processing and card issuance.
• The multi-vendor collaboration delivers a unified, enterprise-grade root of trust that bridges the gap between cloud operational agility and stringent financial data security requirements.

The News

Marvell Technology, Inc., Microsoft and Utimaco announced delivery of Azure Payment HSM v2, a new highly available payments security platform for financial institutions and payment service providers. The offering combines Marvell LiquidSecurity hardware security module (HSM) technology, Utimaco Atalla Payments Module and Microsoft Azure. It provides banks, payment processors and financial institutions with a hardware-backed, compliant and highly available foundation for securing critical payment workloads and transactions. For more information, read the Marvell press release.

Analyst Take

Marvell, in collaboration with Microsoft and Utimaco, has delivered Azure Payment HSM v2 to provide financial institutions with a cloud-native, highly available security platform for payment workloads. By combining Marvell's LiquidSecurity hardware security module technology with Utimaco’s Atalla Payments Module on Microsoft Azure, the solution eliminates the cost and operational complexity of managing physical, on-premises HSM infrastructure. The platform directly addresses the growing limitations of traditional data center deployments, which struggle to scale globally amid rising transaction volumes, evolving fraud threats, and strict regulatory mandates such as PCI PIN Security and PCI HSM.

Marvell’s purpose-built, multi-tenant hardware delivers high-throughput cryptographic processing, while Utimaco’s software supports core banking functions including card issuance, PIN translation, and mobile payments. Operating as a fully managed Azure service, the architecture enables banks and payment processors to maintain complete cryptographic key sovereignty and strict compliance without sacrificing operational agility. Consequently, this collaborative multi-vendor framework enables financial organizations to modernize their critical payment networks, elastically scale security capabilities, and refocus resources on digital innovation.

The HyperFRAME Lens State of the Enterprise I&O 1H 2026 study's finding that Security Tops Infrastructure Challenges, with 72% of organizations citing security and compliance as a major barrier and 31% naming it their primary hurdle, directly maps to the delivery of Azure Payment HSM v2. As financial institutions transition payment workloads to the cloud, they face intense pressure from stringent regulatory mandates such as PCI PIN Security and PCI HSM alongside escalating cyber threats. We see the collaborative offering from Marvell, Microsoft, and Utimaco directly resolves this enterprise uncertainty by delivering a fully managed, hardware-backed cloud platform that satisfies complex compliance and cryptographic security demands without the operational burden of physical, on-premises infrastructure.

Driving Cloud-Scale Payment Modernization: Market Demand, Compliance, and Security Vectors

We find that the market demand for secure, cloud-scale payment solutions is rapidly expanding as global commerce shifts from legacy, on-premise transactional systems to cloud-native financial ecosystems. This shift is primarily fueled by the exponential rise of international e-commerce and real-time payment networks, which necessitate infrastructure capable of handling high-volume transaction spikes with near-zero latency. Concurrently, the increasing sophistication of cyber threats mandates enterprise-grade security features, such as automated tokenization, end-to-end encryption, and AI-driven fraud detection, that cloud architecture natively facilitates at scale.

Strict and constantly evolving regulatory frameworks, including PCI PIN Security and PCI HSM alongside PCI-DSS, and regional data sovereignty mandates also drive adoption, as cloud providers continuously update compliance protocols to lighten the administrative burden on merchants. Moreover, financial institutions are seeking operational cost optimizations, leveraging the elastic, pay-as-you-go economics of the cloud to reduce hardware overhead while maximizing system uptime. From our viewpoint, the integration of open-banking APIs and embedded finance into non-financial applications acts as a powerful catalyst, requiring businesses to use secure cloud infrastructures to deliver frictionless, contextual payment experiences globally.

Specifically, the Payment Card Industry Security Standards Council (PCI SSC) maintains an interconnected suite of regulatory compliance frameworks designed to secure distinct layers of the payment processing ecosystem, spanning physical hardware, cryptographic workflows, and enterprise environments. At the base of this architecture, PCI HSM governs the physical, logical, and environmental security of dedicated hardware security modules, certifying that physical appliances manufactured by vendors such as Marvell or Utimaco possess active tamper-resistance capabilities like automated key zeroization.

Building upon this physical foundation, PCI PIN Security establishes procedural and cryptographic rules specifically for Personal Identification Number processing, mandating end-to-end encryption, secure key exchange mechanisms, and strict lifecycle management to protect PIN confidentiality during transmission across payment networks. Functioning as the overarching umbrella, PCI-DSS regulates the entire Cardholder Data Environment (CDE), encompassing broader operational controls, network segmentation, access management, and vulnerability mitigation to safeguard sensitive cardholder data across databases, application servers, and cloud platforms.

Rather than operating in isolation, we see these standards form a tightly integrated, hierarchical ecosystem where higher-level compliance depends directly on lower-level certifications. In a typical cloud-scale payment deployment, a hardware manufacturer first secures PCI HSM certification to guarantee the physical integrity of the underlying appliance, which a cloud or payment service provider subsequently deploys to execute cryptographic operations.

The provider then configures those certified modules under PCI PIN Security protocols to govern the safe translation, decryption, and injection of PIN data across financial switches. Overall, all of these cryptographic mechanisms operate inside an infrastructure validated against PCI-DSS, ensuring that any enterprise processing PIN-based card transactions achieves full regulatory compliance by anchoring its broader environment to certified PCI HSM hardware and PCI PIN-compliant workflows.

Looking Ahead

We believe that by combining Marvell’s high-performance hardware, Microsoft Azure’s scalable cloud architecture, and Utimaco’s specialized HSMs, this collaboration establishes an end-to-end, enterprise-grade root of trust that resolves the tension between cloud flexibility and stringent cryptographic control. This integrated ecosystem enables enterprises to migrate sensitive workloads to the cloud without sacrificing physical key governance, compliance guarantees, or operational performance. As such, organizations should adopt this joint proposition to future-proof their security architecture against evolving compliance mandates while streamlining the management of mission-critical data.