Armet AI

NVIDIA Confidential Computing secures data in use, protecting AI models and workloads as they execute, by leveraging hardware-based trusted execution environments built into NVIDIA Hopper and Blackwell architectures and supported platforms. It enables enterprises to deploy AI training and inference, whether on-premises, in the cloud, or at the edge, with no changes to model code, while ensuring the confidentiality and integrity of both data and models. Key features include zero-trust isolation of workloads from the host OS or hypervisor, device attestation to verify that only legitimate NVIDIA hardware is running the code, and full compatibility with shared or remote infrastructure for ISVs, enterprises, and multi-tenant environments. By safeguarding proprietary AI models, inputs, weights, and inference activities, NVIDIA Confidential Computing enables high-performance AI without compromising security or performance.

Google Cloud’s Confidential Computing delivers hardware-based Trusted Execution Environments to encrypt data in use, completing the encryption lifecycle alongside data at rest and in transit. It includes Confidential VMs (using AMD SEV, SEV-SNP, Intel TDX, and NVIDIA confidential GPUs), Confidential Space (enabling secure multi-party data sharing), Google Cloud Attestation, and split-trust encryption tooling. Confidential VMs support workloads in Compute Engine and are available across services such as Dataproc, Dataflow, GKE, and Gemini Enterprise Agent Platform Notebooks. It ensures runtime encryption of memory, isolation from host OS/hypervisor, and attestation features so customers gain proof that their workloads run in a secure enclave. Use cases range from confidential analytics and federated learning in healthcare and finance to generative-AI model hosting and collaborative supply-chain data sharing.