Thales
French digital identity and cybersecurity conglomerate
Thales is a French multinational conglomerate whose Cloud Protection and Licensing (CPL) division provides data security products including hardware security modules, encryption key management, software licensing, and identity and access…
Definition
Thales is a French multinational conglomerate whose Cloud Protection and Licensing (CPL) division provides data security products including hardware security modules, encryption key management, software licensing, and identity and access management technology. Formed through Thales's acquisition of Gemalto, the division serves banks, governments, and enterprises that need to protect cryptographic keys, sensitive data, and digital identities at scale across regulated industries worldwide.
Overview
Thales as a whole is a large aerospace, defense, and digital identity conglomerate, and its Cloud Protection and Licensing division is the part of the business focused specifically on data security: protecting cryptographic keys, encrypting sensitive data, managing software license entitlements, and verifying digital identities for large organizations. The division exists because enterprises handling regulated data or high-value transactions need cryptographic key protection and identity verification that meets strict compliance standards, a need Thales inherited and expanded through its 2019 acquisition of Gemalto, itself a major digital security and identity vendor. Mechanically, the CPL division's core products include hardware security modules, tamper-resistant physical devices that generate and store cryptographic keys so private key material never exists unprotected outside dedicated hardware, used by banks to secure payment processing and by cloud providers and enterprises to protect encryption keys for sensitive data at rest. Alongside HSMs, Thales offers encryption and key management platforms that let organizations centrally manage keys used to encrypt data across multiple cloud providers and on-premises systems, software licensing and entitlement management tools that let software vendors control and monetize how their products are activated and used, and identity and access management products covering authentication and credential issuance. Thales CPL competes most directly with Entrust in the hardware security module and payment security space, both companies having deep roots in financial-sector cryptographic hardware, while its software licensing business occupies a more distinct niche shared with vendors focused specifically on entitlement management rather than broader security. Unlike a certificate authority such as DigiCert or Sectigo, Thales CPL is not primarily in the business of issuing publicly trusted TLS certificates; its focus is the underlying cryptographic infrastructure and key protection that many other security systems, including certificate authorities themselves, may rely on. In practice, banks and payment processors deploy Thales hardware security modules to protect transaction signing and card issuance keys, cloud-using enterprises use its key management platforms to retain control over encryption keys even when data lives in third-party cloud infrastructure, and software vendors use its licensing tools to manage subscription and entitlement enforcement across their customer base. The main consideration for evaluating Thales CPL is that its offerings are infrastructure-level and specialized, aimed at organizations with genuine hardware-backed key protection, multi-cloud key management, or licensing enforcement needs, rather than a general-purpose security tool a small team would reach for; procurement and integration typically involve dedicated hardware, professional services, or platform-level integration rather than a simple software installation.
Key Features
- Hardware security modules for tamper-resistant cryptographic key protection
- Centralized encryption key management across multi-cloud and on-premises systems
- Software licensing and entitlement management tools for vendors
- Identity and access management products for authentication and credentials
- Payment and transaction security infrastructure for financial institutions
- Technology inherited and expanded through the Gemalto acquisition
- Compliance-oriented products for regulated banking and government use
- Key management integration with major public cloud provider platforms