Eviden brings sovereign KMS to Salesforce Hyperforce in Europe

Eviden, the cybersecurity products brand of Atos Group, has made its Key Management System (KMS) available on Salesforce Hyperforce and Shield: Platform Encryption. The integration introduces what Eviden calls a "bring your own sovereign encryption" (BYOSE) model, under which organisations keep their encryption keys in externally managed infrastructure hosted in Europe, entirely separate from Salesforce's cloud environment.

The announcement targets enterprises and public sector bodies operating under strict European data-residency obligations, particularly those deploying Salesforce's AI tooling, including Agentforce, where governance of training and inference data is increasingly scrutinised by compliance teams.

How the architecture works

The solution rests on two technical pillars. First, the Eviden KMS application runs inside Confidential Virtual Machines, which isolate cryptographic operations in memory and prevent the underlying cloud infrastructure from accessing key material. Second, the system interfaces with the Eviden Proteccio hardware security module (HSM), which holds ANSSI's highest qualification level; the French cybersecurity agency's certification is widely regarded as one of the most demanding in Europe.

Under the arrangement, the master encryption key and the full key lifecycle, from generation through rotation to revocation, remain under direct customer control. Eviden acts as the authoritative key store; Salesforce never holds unencrypted key material. The model maps onto the shared-responsibility framework standard in enterprise cloud contracts: the hyperscaler secures its own infrastructure, while the customer retains accountability for data classification and encryption posture.

Antoine Grenier, global head of cybersecurity products at Eviden, said: "This collaboration brings together the proven security of our Proteccio HSM, the only hardware security module qualified by ANSSI, and Confidential VMs with the scalability and flexibility of Hyperforce. Together, these technologies give customers full control over the confidentiality of their data."

Market and regulatory context

Sovereign encryption is one of the most active sub-categories in enterprise cloud security. The EU AI Act, phasing in from 2024 through 2026, imposes data-governance obligations on high-risk AI deployments, and GDPR continues to set a hard floor on data-residency and access controls for personal data. For regulated sectors, including financial services, healthcare and central government, the practical barrier to adopting cloud-based CRM and AI tools has often been the inability to prove that no third party can access plaintext data. Customer-managed key solutions, already offered by major hyperscalers in various forms, address precisely this concern.

Eviden's positioning is notable in that it combines a European-certified HSM with a Confidential VM wrapper, a combination designed to close the gap between hardware-root-of-trust assurances and the operational flexibility of public cloud. Competitors in the external key management space include Thales with its CipherTrust platform and IBM's Hyper Protect portfolio, both of which similarly target regulated European workloads. The BYOSE framing also resonates with the European Commission's push for digital sovereignty, reflected in frameworks such as EUCS (the European Union Cybersecurity Certification Scheme for Cloud Services), which is expected to require similar key-separation controls at higher assurance tiers.

Salesforce's vice-president for alliances and chief ecosystem officer in France, Bertrand Janvier, said the integration is designed to allow "even the most regulated organisations in Europe to leverage Agentforce and Salesforce AI with complete confidence."

Eviden declined to disclose pricing, customer names, or the number of organisations already in deployment. The solution is generally available as of 30 June 2026. Atos Group, the parent entity, is listed on Euronext Paris and reported annual revenue of approximately €7.2 billion at its go-forward perimeter.