How are SSL certificates stored by Vercel?

Hello Vercel team,

We are currently evaluating Vercel and need clarification on how SSL certificates are handled to ensure they meet our compliance and security requirements.

Specifically:

How are both Vercel-generated and customer provided SSL certificates stored behind the scenes?
Does Vercel use an in-house storage system for certificates, or are they managed through a trusted service such as Azure Key Vault, AWS Certificate Manager, or a similar solution?

Thank you!

Hey, ! Thanks for your question 🙂

How are both Vercel-generated and customer provided SSL certificates stored behind the scenes?

We store them encrypted at rest in our database. You can read more in our documentation:

https://vercel.com/docs/encryption#how-certificates-are-handled

Does Vercel use an in-house storage system for certificates, or are they managed through a trusted service such as Azure Key Vault, AWS Certificate Manager, or a similar solution?

We use an in-house storage system.

Let us know if you have any more questions!