ICE Beta

Encrypt, decrypt and audit access to your application secrets and sensitive data Starting at $0/mo.

Encryption

ICE makes it easy to store secret data encrypted-at-rest with the industry-best AES algorithm

Decryption

ICE makes it safe, fast and reliable to decrypt sensitive data only when it’s needed

Auditing

ICE leaves an audit trail about the people and systems that accessed sensitive data

Security

Data encrypted with ICE can not be understood by Heroku or your database provider, adding an additional layer of security.

Compliance

ICE is a managed service that is PCI compliant. ICE enables encryption-at-rest, part of HIPAA compliance.

Managed Service

ICE is a highly-available service that controls encryption keys in a Hardware Security Module (HSM)

Region Availability

The available application locations for this add-on are shown below, and depend on whether the application is deployed to a Common Runtime region or Private Space. Learn More

  • Common Runtime
  • Private Spaces
Region Available
United States Available
Europe Available
Region Available Installable in Space
Virginia Available
Oregon Available
Frankfurt Available
Tokyo Available
Sydney Available
Dublin Available

Plans & Pricing

    • Encryption / Decryption Keys true
    • Random Generator
    • Day Audit Logs 0
    • Audit Reports
    • Key Rotation
Install ICE
heroku addons:create ice

To provision, copy the snippet into your CLI or use the install button above.

ICE Documentation