# Key Management System

The Key Management System (KMS) is Crypto APIs' HSM-backed key storage with policy-based signing. Private keys are generated and held inside hardware security modules, and every signing operation is governed by the policies you configure — so keys stay protected across their whole lifecycle.

## What it does

- **HSM-backed storage** — keys generated and stored inside hardware security modules.
- **Policy-based signing** — configurable rules govern how and when signatures are produced.
- **Secure key lifecycle** — generation, storage, and management handled securely on your behalf.
- **Wallet integration** — underpins the wallet infrastructure in the Crypto APIs suite.

## Related

- [/products/wallet-as-a-service](/products/wallet-as-a-service) — custodial/non-custodial wallet infrastructure built on KMS and MPC.
- [/products/wallet-as-a-service/mpc](/products/wallet-as-a-service/mpc) — multi-party computation key management.
- [Security & ISO 27001](/security) — compliance certifications and security posture.
- [HD Wallets API reference](https://developers.cryptoapis.io/v-2.2024-12-12-175/RESTapis/hd-wallets) — the endpoint reference in the developer docs.
- [Developer portal](https://developers.cryptoapis.io/) — full technical reference.