We are currently evaluating Vercel and need clarification on how SSL certificates are handled to ensure they meet our compliance and security requirements.
Specifically:
How are both Vercel-generated and customer provided SSL certificates stored behind the scenes?
Does Vercel use an in-house storage system for certificates, or are they managed through a trusted service such as Azure Key Vault, AWS Certificate Manager, or a similar solution?
How are both Vercel-generated and customer provided SSL certificates stored behind the scenes?
We store them encrypted at rest in our database. You can read more in our documentation:
Does Vercel use an in-house storage system for certificates, or are they managed through a trusted service such as Azure Key Vault, AWS Certificate Manager, or a similar solution?