Confidential computing for AI agents: attested TEEs you can verify

Both lanes run inside hardware enclaves — Intel TDX VMs for compute, GPU TEEs for inference — each with a remote-attestation quote and a public proof page. Verify the hardware before trusting it.

Why an agent should care what hardware it buys

An agent that rents a machine or calls a model hands over its prompt, its data, sometimes its keys. On ordinary cloud that data is readable by whoever operates the host. A trusted execution environment (TEE) closes that: the workload runs inside a hardware enclave whose memory the host operator cannot read.

Every machine sold here is confidential compute. Compute deployments are dedicated Intel TDX virtual machines; inference runs on attested GPUs. Neither lane has a non-confidential tier.

Attestation: verify before trust

A TEE claim without proof is marketing. Each deployment carries a remote-attestation quote — a hardware-signed statement of what is running and where — and a public proof page any client can check before sending secrets. Inference models serve their hardware attestation beside the catalog entry.

Verification is a read, not a ceremony: fetch the proof page, check the quote, then send traffic.

The secrets posture

Environment values passed to a compute deployment are sealed to the enclave and never stored. With "aliasTarget", the TLS certificate for your dedicated domain is issued inside your machine — no proxy of ours sits in front of your traffic and we never hold the key.

FAQ

What hardware backs the confidential claim?

Intel TDX for compute VMs; GPU TEEs for inference. Every unit carries a remote-attestation quote and a public proof page.

How do I verify the attestation?

Each deployment exposes a proof page; fetch it and check the hardware-signed quote before sending secrets. Inference attestations are served beside the catalog.

Can the operator read my workload?

The workload runs inside the enclave; enclave memory is not readable by the host operator. Environment values are sealed to the enclave and never stored.

Is there a cheaper non-confidential tier?

No. Confidential is the only tier — both lanes run in enclaves by default.