ICE Beta

Encrypt, decrypt and audit access to your application secrets and sensitive data Starting at $0/mo.


ICE makes it easy to store secret data encrypted-at-rest with the industry-best AES algorithm


ICE makes it safe, fast and reliable to decrypt sensitive data only when it’s needed


ICE leaves an audit trail about the people and systems that accessed sensitive data


Data encrypted with ICE can not be understood by Heroku or your database provider, adding an additional layer of security.


ICE is a managed service that is PCI compliant. ICE enables encryption-at-rest, part of HIPAA compliance.

Managed Service

ICE is a highly-available service that controls encryption keys in a Hardware Security Module (HSM)

Region Availability

The available application locations for this add-on are shown below, and depend on whether the application is deployed to a Common Runtime region or Private Space. Learn More

  • Common Runtime
  • Private Spaces
Region Available
United States Available
Europe Available
Region Available Installable in Space
Virginia Available
Oregon Available
Frankfurt Available
Tokyo Available
Sydney Available
Dublin Available

Plans & Pricing

    • Encryption / Decryption Keys true
    • Random Generator
    • Day Audit Logs 0
    • Audit Reports
    • Key Rotation
heroku addons:create ice

To provision, copy the snippet into CLI or login to provision on Elements.

ICE Documentation