Hardware-isolated execution that protects code and data in use, and can prove what it runs through attestation.
Current TEEs include Intel TDX and SGX, AMD SEV-SNP, Arm CCA and confidential computing modes of recent NVIDIA GPUs. Each produces its own attestation evidence, signed with keys rooted in the hardware.
A TEE without attestation protects data from the host, but gives the data owner no way to check what code received it.
Example. A hospital sends records into a confidential virtual machine at a cloud provider. The provider's staff run the host and still cannot read the records.
Attested AIAttested cloud workloads
Working on re-attestation for your product? A first call takes 30 minutes and commits you to nothing. Bring your product and the one question that worries you.
Next fixed date: EU Digital Identity Wallets are due in every member state on 24 December 2026, 42 days from now.