What TASS does

TASS (北京江南天安科技有限公司 / Beijing JN TASS Technology Co., Ltd.) is a Chinese commercial cryptography product and solution provider founded in 2005 and headquartered in Beijing, with branch offices in Guangzhou and Shanghai. The company designs, develops, and deploys cryptographic hardware (cloud-native cipher machines, server cipher machines, financial data cipher machines, PCI-E cryptographic cards, SSL security gateways, dedicated-line cipher machines, signature and timestamp servers, and IoT security modules) alongside a cloud-native Cryptographic Service Management Platform (TACSP) and supporting software services (key management, database encryption, file security, unified identity authentication, dynamic token, co-signature). Its implementations span the full SM1/SM2/SM3/SM4/SM7/SM9 national cryptographic algorithms plus RSA, and the most recent product additions include a quantum-safe conference communication system and FIPS 140-2 Level 3 certified modules. TASS has contributed to 27 national standards and 20 cryptographic industry standards and operates an internal offensive-defensive research lab (Orion/猎户攻防实验室).

The company sells to government, financial, telecommunications, energy, public security, broadcasting, transportation, power, aerospace, and automotive customers, with named enterprise customers including Alibaba Cloud (10-year strategic partner), Ant Financial (SJK19150 co-developer), Huawei (Kunpeng NATIVE), Bank of China (first domestic commercial bank national cipher transformation), and China Minsheng Bank. GTM combines a direct enterprise field sales team covering Beijing, Guangzhou, Shanghai, and Xi'an with cloud marketplace listings on Alibaba Cloud and Huawei Cloud for mid-market segments. Revenue streams are split across one-time hardware sales (cipher machines, cards, gateways, modules), subscription/recurring cloud cryptographic services delivered through Alibaba Cloud and Huawei Cloud platforms, and project-based professional services for system integration, deployment, and post-sale support. Pricing is quote-based per project and not publicly disclosed.

TASS holds extensive regulatory and international certifications including State Cryptography Administration commercial cryptographic product certification, PBOC 3.0 financial compliance, GM/T 0028-2014 Level 3 cryptographic module certification, FIPS 140-2 Level 3, ISO 9001/14001/20000/27001/45001 suite, national high-tech enterprise status, and national-level specialized 'Little Giant' enterprise status (re-certified November 2025). The only disclosed institutional capital event is a Series A round from Shenzhen Capital Group in March 2014; no subsequent funding rounds, acquisitions, or parent company relationships have been disclosed.

Name

TASS

Legal name

北京江南天安科技有限公司

Website

https://tass.com.cn

Company type

Private

Founded year

2005

Operating status

Operating

Headcount range

1–10 employees

Short description

TASS (江南天安) is a Beijing-based Chinese commercial cryptography provider founded in 2005 that designs and manufactures cryptographic hardware, software platforms, and solutions for government, financial, telecom, energy, and cloud-platform customers in China and selected overseas markets.

Ownership category

akta.pro rank

Product category

Commercial Cryptography and Data Security

NAICS

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182), Computer Systems Design and Related Services (54151)

akta.pro primary industry

Key Management, Encryption & Secrets Management (KMS/HSM/Vault) (HDABAHAG)

akta.pro secondary industry

Confidential Computing & Hardware-backed Protection (TEE/HSM) (HDADAFAJ)

Keywords

• Commercial cryptography
• Cryptographic hardware
• Cloud HSM services
• Data encryption solutions
• Key management systems

Headquarters

HQ city

Beijing

HQ country

China

HQ region

Asia

Offices3 records

Markets served

GTM type

B2B

Offering type

Hardware or Manufacturing

Cost components

Technology or R&D, Supply Chain, Personnel, Marketing or Sales, Operations

Revenue model

1. Cryptographic Hardware Products: Sale of proprietary cryptographic hardware products including cryptographic machines (servers, financial data, cloud, FIPS-certified), cryptographic cards, SSL security gateways, communication encryption devices, and security modules. One-time hardware purchase model with potential maintenance contracts.
2. Cloud Cryptographic Services: Cloud-based cryptographic services delivered via cryptographic resource pools and cryptographic platforms. May include subscription/SaaS-style consumption for cryptographic services on cloud platforms.
3. Cryptographic Solutions and Technical Services: Custom cryptographic solutions, system integration, deployment, and after-sales technical support services for government, financial, and enterprise customers.

Pricing tiers

Go-to-market motion1 record

Distribution channels3 records

Marketing channels5 records

Core offering

TASS designs, manufactures and sells commercial cryptographic hardware products including cloud server cipher machines (HSMs), cryptographic cards, SSL security gateways, financial data cipher machines and signature/timestamp servers. These hardware offerings are complemented by the TACSP cloud-native cryptographic service management platform, key management systems, and platform services for database encryption, dynamic tokens, co-signature and SSL offloading. The portfolio serves government, banking, telecom, energy and cloud platform customers with full-chain data encryption, identity authentication and secure communications.

Product overview

TASS (江南天安) offers a comprehensive commercial password product portfolio centered on cryptographic hardware, software platforms, and security solutions. The core offerings include cloud cipher machines (SJK19150, CloudHSM series), server cipher machines (SJJ1988, CryptoEngine L3), financial data cipher machines (SJJ1310), SSL security gateways (TASSL GW-2000), and signature verification servers. These hardware products are complemented by the TACSP Cipher Service Management Platform providing unified password services, key management systems (SYT1915), and platform services including database encryption, dynamic tokens, co-signature services, and SSL gateway services. The product architecture combines hardware security modules with software platforms to address data encryption, identity authentication, key management, and secure communications across cloud, financial, government, and IoT sectors.

Differentiator

Problem solved

Functional benefit

Brands

• 天安天创: Primary product brand for cloud password machines, server password machines, financial data password machines, signature and timestamp servers, and SSL security gateways.
• 天安天链
• 猎户攻防实验室
• 天安学院

Products and services

• SJK19150 Cloud Service Password Card PCI-E Gen3 X8 interface cipher device with security level 3, supporting SM1/SM2/SM3/SM4/SM7/SM9/RSA algorithms. Co-developed with Ant Financial for high-performance data encryption services with 50,000 SM2 signatures/second and 20Gbps SM4 encryption.
• SJK1829-C Cloud Service Password Card Next-generation innovation cipher product providing virtualized cipher operations for cloud environments. Supports digital signature, encryption, data integrity verification, and key management with PCI-E interface and GM/T 0028-2014 Security Level 2 certification.
• CloudHSM L3-G Cloud Server Cipher Machine First domestic cloud cipher product supporting Kunpeng NATIVE. Hardware virtualization with isolated user cipher chip resources and dynamic cipher computing resource allocation, enabling multiple virtualized cryptographic machines (VSMs) on a single device.
• SJJ1988 Server Cipher Machine General-purpose cipher machine providing secure key management and high-performance multi-task parallel processing for digital signature, verification, encryption, and decryption operations. Designed for government, financial and enterprise deployments.
• CryptoEngine L3 Server Cipher Machine Level 3 cipher machine meeting GM/T 0028-2014 requirements with environmental failure protection and non-invasive security features for government, financial and enterprise cryptographic workloads.
• SJJ1310 Financial Data Cipher Machine Financial cipher machine meeting PBOC3.0 specifications and passed bank card testing center certification. Supports IC card issuance, transaction verification, dynamic password authentication, and SSL offloading for banks, securities, insurance and payment institutions.
• SRJ1303/SRJ1933 Signature Verification Server Digital signature server supporting SM2, RSA algorithms with PKCS#1, PKCS#7 standards and PDF signature capabilities for enterprise document signing workflows.
• FIPS Certified Cipher Machine (TASS Crypto Engine) Internationally certified cipher machine meeting FIPS 140-2 Level 3 standards. Supports RSA, 3DES, SHA series algorithms for global commercial users outside China.
• TASSL GW-2000 SSL Security Gateway High-performance transparent encryption gateway for Web servers, cloud systems, IoT and connected vehicle networks. Supports HTTPS/TLS-TCP/DTLS protocols with national secret algorithm support and national secret SSL offloading capabilities.
• TASSL CLB100 Dedicated Line Cipher Machine Dedicated cipher machine for leased line communication encryption supporting domestic and international cipher algorithms with SDH and Ethernet support, marketed under the 天安天链 (TASS Tianlian) product brand.
• Cipher Service Management Platform (TACSP) Cloud-native password infrastructure system providing unified password service management for public cloud, private cloud, hybrid cloud and traditional data centers. Built on a compliant cryptographic resource pool with multi-tenant cryptographic resource management.
• SYT1915 Key Management System Symmetric/asymmetric key lifecycle management system with strict authorization controls. Provides sensitive data encryption services for banking, telecom, securities, insurance and transportation industries.
• SJT1916 Privacy Data Encryption System System supporting national secret and international algorithms for privacy data encryption with hardware-based cryptographic module protection for enterprise data protection workloads.
• Security Module Compact cipher module for protecting data transmission confidentiality, integrity and authenticity. Supports Mini PCIE and TTL interfaces for embedded IoT applications.
• SHT1811/SHM1806 Co-signature System Server Module Mobile identity authentication product using smartphones as carriers. Enables QR code scanning for secure login without additional hardware tokens, using patented collaborative signature technology.
• File Security Service System Enterprise file security system providing encryption, integrity protection and identity authentication for confidential file transmission.
• Unified Identity Authentication System Identity authentication management platform supporting digital certificates, static passwords, dynamic tokens, QR codes and biometric authentication for enterprise identity management.
• Cipher Machine Load Balancing System Middleware product transparently forwarding cipher machine instructions with hot backup and intelligent load balancing between multiple cipher machines for high-availability deployments.
• SJK1829 PCI-E Cipher Card Security level 2 cipher card supporting SM1/SM2/SM3/SM4/SM7/SM9 algorithms for high-performance data encryption services in server and workstation deployments.
• Quantum Conference Communication System Quantum-safe communication system launched in December 2025 to protect high-security level data transmission for enterprise conference and communications workloads.
• SignServer G2000L Signature and Timestamp Server Level 2 innovation signature and timestamp server with full domestic control, providing SM2 signature and verification compliant with GMT 0010-2023 specification for enterprise document signing and timestamping workflows.
• Co-signature Service Platform service enabling mobile phone and PC as authentication medium for SM2 digital certificate signature and encryption operations using patented key segmentation and collaborative cryptographic computation.
• Dynamic Token Service Dynamic password-based authentication service supporting HOTP, TOTP, OCRA algorithms and national secret SM3 algorithm for enterprise user authentication.
• Database Encryption Service Column-level data encryption and permission control service supporting SM2/SM3/SM4 algorithms for Java-based database deployments.
• SSL Gateway Service Platform service providing SSL channel establishment for secure data transmission with national secret SSL offloading capabilities delivered as a cloud-native service.
• TaSSL (天安版国密OpenSSL) Open-Source Cryptographic Library Open-source cryptographic library based on OpenSSL, incorporating national SM2, SM3, SM4 algorithms. Implements GMSSL SSL secure communication based on national dual-certificate system and is open-sourced under license for public use and national algorithm promotion.

Quantifiable outcome

• SJK19150 SM2 signature performance: 50,000 times/second; SM4 encryption: up to 20Gbps
• +3 more outcomes

Named customers5 records

Segments6 records

Ideal customer profiles5 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration5 records

AI capability2 records

Feature5 records

Partnerships

Seven partnerships are on record, tiered minor, core and flagship.

• Sansec / 江南科友 / 三未信安minorStrategic or Co-development Partner · 16 April 2025Three-way joint release of 'Cryptographic + AI Large Model' in April 2025, combining TASS cryptographic technology with AI capabilities from partners Sansec and 三未信安.
• Huawei (Kunpeng Ecosystem)coreTechnology or Integration · 26 January 2025Signed HarmonyOS cooperation memorandum in December 2024. Two TASS core products (cloud server cryptographic machines) received Kunpeng NATIVE certification, validating compatibility with Huawei's Kunpeng computing ecosystem. TASS participates in Huawei Cloud ecosystem for cryptographic product distribution.
• openHiTLS CommunityminorStrategic or Co-development Partner · 20 January 2025Participated in the open-source release of openHiTLS cryptographic suite. Awarded 'openHiTLS Community Founding Member Honor Unit' status.
• CSA Cloud Security AllianceminorStrategic or Co-development Partner · 16 March 2016Became CSA Cloud Security Alliance member in March 2016. Later obtained CSA Authorized Education and Training Examination Center qualification. Active participation in cloud security standard development.
• China International Financial Expo (Financial Sector Ecosystem)minorGTM or Marketing Partner · 19 October 2015Regular participant in China International Financial Expo, showcasing financial cryptographic solutions to banking, insurance, and payment industry decision-makers.
• Alibaba CloudflagshipStrategic or Co-development Partner · 30 September 201510-year strategic partnership established in 2015 for cloud cryptographic technology collaboration. TASS and Alibaba Cloud jointly launched China's first cloud data encryption service. TASS cloud cryptographic machines are deployed on Alibaba Cloud platform, enabling cloud tenants to access enterprise-grade cryptographic services on demand.
• 用友网络 (Yonyou)minorStrategic or Co-development PartnerBecame the first batch of ecological partners on 用友云 platform in 2017. TASS cloud cryptographic machines and trusted cloud signing system were launched on the Yonyou Cloud marketplace.

Scale indicators7 records

Recent moves9 records

Expansion highlights6 records

Broad incumbents

• Thales (formerly Gemalto): Global leader in HSMs (Luna HSM series) and data protection with comprehensive cryptographic hardware portfolio. While not focused on Chinese SM algorithms, Thales is the international incumbent TASS would compete against for multinational customers with FIPS-certified cryptography needs.
• Entrust: Global cryptography and PKI vendor offering HSMs (nShield), key management, and digital certificate solutions. Comparable to TASS on enterprise key management and cryptographic hardware, with broader international presence and longer enterprise customer track record.
• Utimaco: German-based HSM manufacturer (u.trust General Purpose HSM) serving financial, government, and cloud service provider customers globally. Direct competitor in the HSM category where TASS has its CloudHSM product line, with stronger international brand recognition.

Others

• 华为 (Huawei): Chinese technology conglomerate with both strategic partnership and emerging cryptography capabilities through Kunpeng ecosystem and HarmonyOS initiatives. Functions as both distribution channel (Kunpeng NATIVE certified TASS products) and potential competitor as Huawei builds in-house cryptographic infrastructure for its cloud and enterprise platforms.

Emerging players

• Futurex: US-based HSM and cryptographic infrastructure provider specializing in cloud HSM, key management, and payment cryptography solutions. Comparable to TASS's CloudHSM offering for cloud-native cryptographic services with focus on payment industry verticals similar to TASS's financial sector strength.

Direct peers

• 数字认证 (Beijing Digital Certification / DigitalCert): Chinese digital certificate authority and cryptography solutions provider serving government, healthcare, and financial sectors. Competes with TASS on PKI, digital signatures, and cryptographic infrastructure products for regulated Chinese industries.
• 卫士通 (Westone Information Industry): State-affiliated Chinese information security and cryptography company with broad portfolio including HSMs, encryption products, and secure communications. Directly competes with TASS in government and military cryptography markets as a larger, more established incumbent with state backing.
• 三未信安 (Sansec Technology): Chinese commercial cryptography company specializing in HSMs, key management, and cryptographic solutions for enterprise and government customers. Direct competitor in the same product categories (HSM, cryptographic platforms) serving overlapping financial and government customer segments in China. Notably partnered with TASS on the 2025 '密码+AI大模型' joint launch while also competing head-to-head.
• 格尔软件 (Koal Software): Chinese PKI and cryptography software company providing digital certificates, identity authentication, and cryptographic infrastructure for government and enterprise customers. Overlaps with TASS on cryptographic platforms and identity authentication products serving similar regulated customers.
• 信安世纪 (Infosec Technologies): Chinese information security company with strong cryptography portfolio including SSL VPN, cryptographic platforms, and PKI solutions. Competes with TASS in financial sector cryptography deployments and serves overlapping banking and government customers.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights7 records

Customer concentration

Compliance13 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles7 records

Funding overview

Funding rounds1 record

Investors1 record

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about TASS