# Azure Key Vault pricing (2026): plans, cost, and compliance

**Entry price:** Quote-only — no self-serve price published.
**Domain:** azure.microsoft.com
**Free tier:** No
**Compliance:** HIPAA Yes · SOC 2 Yes · GDPR Yes
**Integrations:** Azure Active Directory / Entra ID (identity-based access), Azure Kubernetes Service (CSI Secrets Store Driver), Azure App Service (managed identity reference), Azure DevOps Pipelines, Azure Resource Manager / Bicep, Terraform (azurerm provider), GitHub Actions, Microsoft Defender for Key Vault
**Best for:** Azure-native workloads requiring HSM-protected keys without on-prem HSM hardware; HIPAA-regulated applications already on Microsoft Azure; Enterprises requiring deep integration with Azure AD, AKS, and Azure DevOps

## Plans

| Plan | Monthly | Annual | Billing | Notes | Source |
| --- | --- | --- | --- | --- | --- |
| Standard Tier — Secrets Operations | Quote-only | — | custom | $0.03 per 10,000 secrets operations. $0.03 per 10,000 certificate operations. $3.00 per certificate renewal request. No setup fees. No flat monthly tier. | infisical.com |
| Premium Tier — HSM-Protected Keys | Quote-only | — | custom | RSA 2048-bit HSM key: $1.00/key/month + $0.03/10,000 transactions. RSA 3072/4096-bit and ECC keys: $5.00/key/month (first 250 keys) + $0.03/10,000 transactions. Managed Storage Account Key Rotation: $1.00/renewal. HSM charges not prorated. | infisical.com |

**Key features:** HSM-backed key storage (FIPS 140-2 Level 2 Standard; Level 3 Premium) without managing HSM hardware; Managed HSM offering for dedicated single-tenant HSM pools; Soft-delete and purge protection for accidental deletion recovery; Automated certificate lifecycle management with DigiCert and GlobalSign integration; Azure Private Link support for network-isolated vault access.

**Plan limits:** Standard: $0.03 per 10,000 secrets operations; no per-secret monthly fee; Premium: $1.00/key/month for RSA-2048 HSM keys; $5.00/key/month for RSA-3072/4096 and ECC; No free tier; Azure free account includes limited credits but no permanent Key Vault free allocation; No throttling tier — pay-per-operation only.

Sources: 1 · Last verified 2026-06-14
Provenance: Official pricing page azure.microsoft.com/en-us/pricing/details/key-vault/ timed out on first attempt. Pricing sourced from Infisical's Azure Key Vault Pricing guide (infisical.com/blog/azure-key-vault-pricing) which cites official Microsoft pricing. No explicit HIPAA/BAA statement found in fetched content; Azure generally supports HIPAA via Microsoft Online Services BAA but not confirmed in this specific fetch. No flat tiers — pure per-operation and per-key metered pricing.
Canonical: https://frontdeskreview.com/software/secrets-management/azure-key-vault/
License: CC BY 4.0. Price history: https://frontdeskreview.com/data/price-history.jsonl