HSM partner
Thales
Reference HSM. Payment, TLS, and application keys can sit in a Thales module the buyer already operates — on-premise or in colocation.
Scope
Thales HSMs are a reference integration for key custody. Certifications (FIPS, PCI HSM where applicable) attach to the module and Thales’s programmes. Inject Group integrates; it does not issue the HSM certificate.
What this is not
Nexus does not require a Thales monopoly. Entrust is the complementary reference. The buyer can use another FIPS-validated HSM in the contract.
How Nexus uses it
Key material for TLS, application secrets, and payment-related wrapping on an air-gapped or on-premise estate.
Inject Group Ltd holds Cyber Essentials. An ISO 27001 formal audit is in progress (target Q4 2026). ISO 27001, SOC 2 Type II, and PCI-DSS attestations for a designated environment sit with the hosting or HSM operator named above.