Confidential computing for AI agents: attested TEEs you can verify
Both lanes run inside hardware enclaves — Intel TDX VMs for compute, GPU TEEs for inference — each with a remote-attestation quote and a public proof page. Verify the hardware before trusting it.
Why an agent should care what hardware it buys
An agent that rents a machine or calls a model hands over its prompt, its data, sometimes its keys. On ordinary cloud that data is readable by whoever operates the host. A trusted execution environment (TEE) closes that: the workload runs inside a hardware enclave whose memory the host operator cannot read.
Every machine sold here is confidential compute. Compute deployments are dedicated Intel TDX virtual machines; inference runs on attested GPUs. Neither lane has a non-confidential tier.
Attestation: verify before trust
A TEE claim without proof is marketing. Each deployment carries a remote-attestation quote — a hardware-signed statement of what is running and where — and a public proof page any client can check before sending secrets. Inference models serve their hardware attestation beside the catalog entry.
Verification is a read, not a ceremony: fetch the proof page, check the quote, then send traffic.
The secrets posture
Environment values passed to a compute deployment are sealed to the enclave and never stored. With "aliasTarget", the TLS certificate for your dedicated domain is issued inside your machine — no proxy of ours sits in front of your traffic and we never hold the key.
FAQ
What hardware backs the confidential claim?
Intel TDX for compute VMs; GPU TEEs for inference. Every unit carries a remote-attestation quote and a public proof page.
How do I verify the attestation?
Each deployment exposes a proof page; fetch it and check the hardware-signed quote before sending secrets. Inference attestations are served beside the catalog.
Can the operator read my workload?
The workload runs inside the enclave; enclave memory is not readable by the host operator. Environment values are sealed to the enclave and never stored.
Is there a cheaper non-confidential tier?
No. Confidential is the only tier — both lanes run in enclaves by default.