Alibaba Cloud Hardware Security Module (CloudHSM) is a hosted cryptographic service built on industry-standard Hardware Security Modules validated by either China's State Cryptography Administration (SCA) or NIST (FIPS 140-2 Level 3 / FIPS 140-3). It provides cloud-based key management and cryptographic operations including encryption and decryption for business data. CloudHSM is available in two deployment models: Virtual HSM, which offers tenant-isolated virtual instances suitable for small- and medium-sized enterprises and KMS integration; and Dedicated HSM, which provides physical HSM hardware for high-performance cryptographic computation and international financial payment compliance. The service supports role-based access control with separation of duties, where Alibaba Cloud manages hardware health and network availability while customers retain full control over HSMs and their encryption keys. CloudHSM supports elastic scaling, allowing users to add or remove HSM instances via the Alibaba Cloud Management Console. Key use cases include sensitive data encryption (e.g., protecting user identity information), financial payment security (ensuring integrity, confidentiality, and non-repudiation), and SSL offloading (accelerating SSL processing and protecting private keys). Pricing is subscription-based (monthly or yearly), with regional pricing available for Singapore, Malaysia, and China (Hong Kong).