Carillon Information Security
Carillon Information Security is a Canadian Certificate Authority that issues cross-certified digital credentials and operates managed PKI services for aerospace, civil aviation, U.S. federal, and healthcare clients. Its CertiPath- and Federal Bridge PKI-approved PIV-I cards, Boeing Aviation IDs, and validation software secure supply chain and government identity workflows.
- Company typePrivate
- Founded2000
- HeadquartersVaudreuil-dorion, Canada
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What Carillon Information Security does
Carillon Information Security is a Canadian private corporation founded in 2000, with principal operations in Vaudreuil-Dorion, Quebec, an Ottawa headquarters for Canadian operations, and a Washington D.C. regional presence via Carillon Federal Services for U.S. federal agency business. The company provides public key infrastructure and digital identity management services to aerospace, civil aviation, defense, federal government, and healthcare organizations. Its solutions address multi-factor authentication compliance under DFARS/NIST SP800-171 and PCI-DSS, secure email, document signing, electronic Authorized Release Certificates under ATA Spec 2000 Chapter 16, and interoperable credentials for federal procurement through PIV-I cards and Boeing Aviation IDs.
The company operates its own Certificate Authority infrastructure cross-certified with CertiPath and the U.S. Federal Bridge PKI, and holds WebTrust for Certification Authorities, ISO 9001:2015, and ISO 27001:2013 certifications. Carillon's product portfolio comprises digital credential bundles (Supply Chain identity/signature/encryption, PIV-I, Boeing Aviation ID, specialty certificates), software solutions (Pathfinder SCVP Suite for certificate path discovery and validation, Trust Validator Outlook extension for email security, LSAP Security Suite for ARINC 827 aviation software protection, e-ARC for electronic Authorized Release Certificates, Certificate Discovery Service via LDAP proxy), and managed services (Managed PKI for Airlines, Managed Corporate PKI private-label CA, Managed PIV-I, and PKI consulting covering Certificate Policy development and cross-certification). Technical differentiation rests on aviation-domain compliance (Spec42, ARINC 827, ATA Spec 2000 Ch. 16) and tooling that resolves complex trust chains in cross-certified environments.
Commercially, Carillon runs a sales-led go-to-market targeting enterprise and government buyers, distributing through two self-serve e-commerce portals (certstore.carillon.ca for supply chain credentials, carillonfedserv.com for PIV-I enrollment) and direct enterprise sales for managed PKI deployments and consulting engagements. Revenue is generated through one-time certificate issuance, recurring managed PKI and private-label CA subscriptions, software product licensing, and PKI consulting professional services. With a workforce of 11-50 employees and Boeing as a named channel partner, the firm operates as a focused niche specialist in regulated identity infrastructure.
Carillon Information Security firmographics
Firmographics- Name
- Carillon Information Security
- Legal name
- Carillon Information Security Inc.
- Website
- https://carillon.ca
- Company type
- Private
- Founded year
- 2000
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Carillon Information Security is a Canadian Certificate Authority that issues cross-certified digital credentials and operates managed PKI services for aerospace, civil aviation, U.S. federal, and healthcare clients. Its CertiPath- and Federal Bridge PKI-approved PIV-I cards, Boeing Aviation IDs, and validation software secure supply chain and government identity workflows.
- Ownership category
- akta.pro rank
Carillon Information Security industry classification
Industry- Product category
- Public Key Infrastructure (PKI) Services
- NAICS
- Security Systems Services (56162)
- akta.pro primary industry
- Device Identity & Certificate-Based Authentication (PKI) (BPAMAEAL)
Keywords
Where Carillon Information Security is headquartered
LocationHeadquarters
- HQ city
- Vaudreuil-dorion
- HQ country
- Canada
- HQ region
- North America
Offices2 records
Markets served
Carillon Information Security business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure
Revenue model
- Digital Credentials/Certificates: Issuance of digital identity certificates including Supply Chain credentials (identity, signature, encryption bundles), PIV-I cards, and specialty certificates. Revenue generated per certificate issuance.
- Managed PKI Services: Private-label Certificate Authority services allowing organizations to issue their own credentials under Carillon's cross-certified PKI infrastructure. Provides control over PIV-I credentials without building own PKI system.
- Software Solutions: Sale of software products including Trust Validator, Pathfinder Suite, LSAP Suite, e-ARC, and Certificate Discovery Service. Products enable certificate usage for authentication, signature, and encryption.
- PKI Consulting: Professional services for PKI deployment including Certificate Policy development, cross-certification with industry bridges, and training.
Go-to-market motion1 record
Distribution channels4 records
Marketing channels4 records
Carillon Information Security product offering
Product offeringCore offering
Carillon Information Security provides PKI-based digital identity products and services, including digital credential issuance (Supply Chain credentials, PIV-I cards, Boeing Aviation ID), PKI software (Pathfinder Suite, Trust Validator, LSAP Security Suite, e-ARC, Certificate Discovery Service), managed PKI/private-label Certificate Authority services, and PKI consulting. The company operates cross-certified Certificate Authorities with CertiPath and the U.S. Federal Bridge PKI, serving aerospace, civil air transport, government/defense, and healthcare customers.
Product overview
Carillon Information Security provides a comprehensive PKI (Public Key Infrastructure) and identity management portfolio centered around digital credentials and supporting software solutions. The core offering consists of three product categories: Credentials (Supply Chain Digital Credentials, PIV-I Cards, Boeing Aviation ID, Specialty Digital Certificates), Software Solutions (Pathfinder Suite for certificate validation, Trust Validator for secure email, LSAP Security Suite for aviation software signing, e-ARC for authorized release certificates, and Certificate Discovery Service), and Managed Services (Managed PKI for Airlines, Managed Corporate PKI, Managed PIV-I, and PKI Consulting). The company operates as a CertiPath cross-certified managed PKI provider, enabling organizations to deploy secure digital identities without building their own PKI infrastructure. Solutions address aerospace, civil air transport, government, and healthcare sectors with multi-factor authentication, digital signatures, and encryption capabilities.
Differentiator
Problem solved
Functional benefit
Brands
- Pathfinder Suite: Includes Pathfinder SCVP Client, Pathfinder SCVP Server, Pathfinder Web Proxy, Pathfinder SCVP Plugin for Siteminder, and Pathfinder Radius Server for certificate path discovery and validation.
- Trust Validator
- LSAP Suite
- e-ARC
- Boeing Aviation ID
Products and services
- Pathfinder Suite Certificate path discovery and validation solution for navigating complex trust paths in cross-certified environments such as CertiPath and U.S. Government Federal Bridge. The suite includes the Pathfinder SCVP Client, Pathfinder SCVP Server, Pathfinder Web Proxy, Pathfinder SCVP Plugin for Siteminder, and Pathfinder Radius Server. Targets enterprises operating in cross-certified PKI environments needing trust chain resolution.
- Trust Validator Email security solution that runs as an Outlook extension to validate digital signatures, mitigating spear-phishing and malware attacks by verifying sender identity. Developed in collaboration with CertiPath. Targets enterprise users needing email authentication and protection against phishing.
- LSAP Security Suite Aviation software component protection solution for signing software per the ARINC 827 standard, ensuring integrity and provenance of software, documentation, and databases installed on aircraft. Includes manufacturer signing and validation libraries with self-contained signatures designed to extend software lifespan and reduce the need for resigning. Targets aerospace manufacturers and aircraft system integrators.
- e-ARC (Electronic Authorized Release Certificate) Web-based solution for digitally signing XML-formatted Authorized Release Certificates per ATA Spec 2000 Chapter 16, enabling electronic ARC management and reducing paper document storage costs. Integrates with document management and MRO platforms. Targets aerospace operators, MROs, and airlines managing paper Form One / e8130-3 processes.
- Certificate Discovery Service (CDS) LDAP proxy solution for certificate validity verification and centralized configuration management. Targets enterprises needing discovery and validation of certificates within their PKI deployments.
- Supply Chain Digital Credentials Digital credential bundle for aerospace supply chain communication with OEMs and suppliers, including an identity certificate for supplier portal logon, a signature certificate for PDF signing, and an encryption certificate for secure email. Targets aerospace supply chain participants needing multi-factor authentication and document/email security.
- PIV-I Card Personal Identity Verification-Interoperable (PIV-I) credential for emergency response teams, utilities, and businesses needing secure credentials to interact with U.S. federal government agencies. CertiPath approved and Federal Bridge PKI cross-certified for government interoperability. Targets federal agencies, contractors, emergency response, and regulated industries needing interoperable high-assurance credentials.
- Boeing Aviation ID Multi-use, industry-standard Spec42 compliant credential for airlines and MROs requiring compliance with Boeing's Multi-Factor Authentication requirements. Used for AviationID portal access, secure email, and electronic document signing. Targets airlines and MROs with Boeing fleet operations.
- Specialty Digital Certificates Specialized digital certificates addressing specific industry requirements beyond standard supply chain credentials. Targets enterprise customers with unique certificate use cases.
- Managed PKI for Airlines Managed PKI service enabling airlines to reduce paper documents while increasing traceability, information security, and integrity. Supports digital certificates for software crate signing, device identification, job card management, maintenance management, physical access, document signing, and email communication. Targets airlines seeking PKI outsourcing.
- Managed Corporate PKI Private-label Certificate Authority solution leveraging CertiPath cross-certified managed PKI, allowing organizations full control over FIPS-201 compliant PIV-I credential management without building their own PKI infrastructure. Targets organizations seeking FIPS-201 compliance and credential issuance under their own brand.
- Managed PIV-I Service Managed service for companies wanting to control issuance of PIV-I credentials for their corporate needs or resell a private-branded PIV-I credential solution. Targets companies and resellers needing private-branded high-assurance credential programs.
- PKI Consulting Expert consulting services for PKI deployment including Certificate Policy writing, industry bridge cross-certification implementation, and training, with over a decade of experience serving North American and European enterprises. Targets organizations needing to design, deploy, or cross-certify their own PKI systems.
Quantifiable outcome
- Up to 80% cost savings compared to building own PKI infrastructure
- +1 more outcomes
Companies that use Carillon Information Security
Customer profileNamed customers6 records
Segments4 records
Ideal customer profiles4 records
Carillon Information Security technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature5 records
Carillon Information Security partnerships and signals
Strategic signalPartnerships
Six partnerships are on record, tiered core.
- CertiPathcoreCertiPath is a cross-certified PKI bridge for the aerospace and defense industry. Carillon's managed PKI solution is cross-certified with CertiPath, enabling Carillon's customers to have credentials accepted within the CertiPath trust network and interoperable with U.S. government Federal Bridge PKI.
- U.S. Federal Bridge PKIcoreCarillon's PIV-I credentials are U.S. Federal Bridge PKI cross-certified, enabling interoperability with U.S. federal government agencies and other organizations connected to the federal trust network.
- ATA (Air Transport Association)coreCarillon contributes to ATA standards development through participation in ATA DSWG (Data Security Working Group). The company implements ATA Spec 2000 Chapter 16 for electronic authorized release certificates and Spec42 for aviation credentials.
- AEEC (Aviation Industry Equipment Committee)coreCarillon participates in AEEC standards development for air transport and aerospace industries, contributing to identity management and PKI specifications.
- TSCP (The Secure Chain Partnership)coreCarillon contributes to TSCP specifications for PKI and identity management in the air transport and aerospace industries.
- BoeingcoreCarillon is a certified Boeing Aviation ID provider, offering multi-use, industry standard credential solution for airlines and MROs requiring compliance with Boeing's Multi-Factor Authentication requirements.
Scale indicators3 records
Recent moves6 records
Expansion highlights5 records
Carillon Information Security competitors and assessment
Company assessmentDirect peers
- DigiCert: Largest dedicated commercial PKI and digital certificate provider globally, offering TLS/SSL, enterprise PKI, and IoT/device identity certificates. Directly competes with Carillon in enterprise and government PKI, though DigiCert operates at vastly greater scale and brand recognition.
- Entrust: Long-standing PKI, SSL, and digital identity provider serving enterprises and governments worldwide. Overlaps directly with Carillon in managed PKI, PIV-I credentials, and certificate lifecycle management, with a broader international footprint.
- Sectigo: Commercial Certificate Authority and PKI provider offering TLS, S/MIME, and enterprise PKI solutions. Competes with Carillon on digital certificate issuance and managed PKI services, with stronger automation and developer tooling.
- GlobalSign: WebTrust-certified Certificate Authority and PKI provider offering identity, signing, and IoT certificates globally. Directly comparable to Carillon in cross-certified enterprise and government PKI use cases, with a broader geographic presence.
Broad incumbents
- HID Global (parent of IdenTrust): Large identity solutions provider spanning physical access, smart cards, and PKI (including IdenTrust, an early Federal Bridge PKI accredited CA). Overlaps with Carillon in credential issuance and government identity programs, but operates at much larger scale across many verticals.
- Thales: Global digital security conglomerate with hardware security modules, smart cards, and PKI/digital identity offerings (formerly Gemalto). Overlaps with Carillon in credential-based identity and PKI for government and aerospace, but as part of a much broader portfolio.
- IDEMIA: Major identity and security solutions provider for government and enterprise, including PIV credentials and PKI services. Competes with Carillon in federal identity programs, but with a global footprint and adjacent biometrics capabilities.
- SITA: IT and communications specialist serving the air transport industry, with adjacent identity and biometric offerings for airports and airlines. Serves the same aerospace customer base as Carillon but with a much broader portfolio of operational IT services.
Emerging players
- Keyfactor: Certificate lifecycle automation and PKI-as-a-service platform serving enterprises and OEMs. Competes with Carillon's managed PKI and certificate discovery offerings, with stronger focus on automation and cloud-native deployment.
- AppViewX: Certificate lifecycle management and PKI automation vendor for enterprise networks. Adjacent to Carillon's Pathfinder Suite and managed PKI services, but focused on broader NetOps and machine identity automation rather than aerospace-specific PKI.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat5 records
Key risks5 records
Key highlights5 records
Customer concentration
Carillon Information Security social profiles
Digital presenceCarillon Information Security compliance and trust
Trust signalCompliance11 records
Carillon Information Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
Carillon Information Security leadership team
Management profileNumber of profiles
Profiles3 records
Carillon Information Security funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Carillon Information Security M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Carillon Information Security
What does Carillon Information Security do?
Carillon Information Security provides PKI-based digital identity products and services, including digital credential issuance (Supply Chain credentials, PIV-I cards, Boeing Aviation ID), PKI software (Pathfinder Suite, Trust Validator, LSAP Security Suite, e-ARC, Certificate Discovery Service), managed PKI/private-label Certificate Authority services, and PKI consulting. The company operates cross-certified Certificate Authorities with CertiPath and the U.S. Federal Bridge PKI, serving aerospace, civil air transport, government/defense, and healthcare customers.
Is Carillon Information Security a public or private company?
Carillon Information Security is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Carillon Information Security founded?
Carillon Information Security was founded in 2000. It employs 11 to 50 people.
Where is Carillon Information Security based?
Carillon Information Security is headquartered in Vaudreuil-dorion, Canada, in the North America region.
How does Carillon Information Security make money?
Four revenue lines are on record. Digital Credentials/Certificates are the primary driver. The others are managed PKI Services, software Solutions and PKI Consulting.
Who are Carillon Information Security's main competitors?
Direct peers on record are DigiCert, Entrust, Sectigo and GlobalSign. Broad incumbents are HID Global (parent of IdenTrust), Thales, IDEMIA and SITA. Emerging players are Keyfactor and AppViewX.
Does Carillon Information Security have an API?
No public API is recorded for Carillon Information Security.
What industry is Carillon Information Security in?
Carillon Information Security's product category is Public Key Infrastructure (PKI) Services. Its primary akta.pro industry code is BPAMAEAL, Device Identity & Certificate-Based Authentication (PKI). Its NAICS code is 56162.