ICE is an alpha add-on and is invite only. If you have an invitation, install this add-on via the CLI. Read More

ICE Alpha

Encrypt, decrypt and audit access to your application secrets and sensitive data Starting at $0/mo.


ICE makes it easy to store secret data encrypted-at-rest with the industry-best AES algorithm


ICE makes it safe, fast and reliable to decrypt sensitive data only when it’s needed


ICE leaves an audit trail about the people and systems that accessed sensitive data


Data encrypted with ICE can not be understood by Heroku or your database provider, adding an additional layer of security.


ICE is a managed service that is PCI compliant. ICE enables encryption-at-rest, part of HIPAA compliance.

Managed Service

ICE is a highly-available service that controls encryption keys in a Hardware Security Module (HSM)

Region Availability

The available application locations for this add-on are shown below, and depend on whether the application is deployed to a Common Runtime region or Private Space. Learn More

  • Common Runtime
  • Private Spaces
Region Available
United States Available
Europe Available
Region Available Installable in Space
Virginia Available
Oregon Available
Frankfurt Available
Tokyo Available
Sydney Available
Dublin Available

Plans & Pricing

    • Encryption / Decryption Keys true
    • Random Generator
    • Day Audit Logs 0
    • Audit Reports
    • Key Rotation
    • Encryption / Decryption Keys 1
    • Random Generator
    • Day Audit Logs 30
    • Audit Reports
    • Key Rotation
heroku addons:create ice

This add-on is in alpha and can only be provisioned if you have been invited by this add-on partner.
To provision, copy the snippet into your CLI.

ICE Documentation